b6f128059dc4739aa4300cc0e956289a642d7558464ad617adaf3232498f54aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6f128059dc4739aa4300cc0e956289a642d7558464ad617adaf3232498f54aa
Size

89KB
Sample

241005-ctc7dszdqr
MD5

2df8f169d74f521886f18bd2c5e92229
SHA1

ed4f442152516194e516f47b642d92b2b26b0add
SHA256

b6f128059dc4739aa4300cc0e956289a642d7558464ad617adaf3232498f54aa
SHA512

0baf34f0dd819f9eb66226c3a47abad5467df3dea10bcea51a003967ebf4bfa353a526109b32ec4975d638ee0aa00ca553d6fd32a185ce5d2dcc5f0fe67b8aa3
SSDEEP

1536:HjFLBX9wylkyxRuBNOkRuS4qts/1/EPdCiDXSG/cSqlExkg8F:DFLBX9RkyxYBNH4qKEPdCwcJlakgw

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b6f128059dc4739aa4300cc0e956289a642d7558464ad617adaf3232498f54aa
- Size
  
  89KB
- MD5
  
  2df8f169d74f521886f18bd2c5e92229
- SHA1
  
  ed4f442152516194e516f47b642d92b2b26b0add
- SHA256
  
  b6f128059dc4739aa4300cc0e956289a642d7558464ad617adaf3232498f54aa
- SHA512
  
  0baf34f0dd819f9eb66226c3a47abad5467df3dea10bcea51a003967ebf4bfa353a526109b32ec4975d638ee0aa00ca553d6fd32a185ce5d2dcc5f0fe67b8aa3
- SSDEEP
  
  1536:HjFLBX9wylkyxRuBNOkRuS4qts/1/EPdCiDXSG/cSqlExkg8F:DFLBX9RkyxYBNH4qKEPdCwcJlakgw
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence