1b6aa8915943a70498d802fd8f6923ec3de7b0c77aea9885f1e3c3c338f7c257 | Triage

Sharing

General

Target

1b6aa8915943a70498d802fd8f6923ec3de7b0c77aea9885f1e3c3c338f7c257N
Size

93KB
Sample

241005-qvz97syeka
MD5

853ea945bcb3b71237b97d66bd0d7cb0
SHA1

8ed4c4ded6c4f5365e86fa8c6d94a6184bb3e46d
SHA256

1b6aa8915943a70498d802fd8f6923ec3de7b0c77aea9885f1e3c3c338f7c257
SHA512

9512ebde16e89a12952a54f21b49cf77b58314c0e618f91250ca2f1ca3d4db7d6f77d3cc69c7cdf544e5a7032266ba3c3484817b6801d1efc0e789ce29fc1fa5
SSDEEP

1536:JPlWYvCAXY0fudmOWn4F0y9sRQQRkRLJzeLD9N0iQGRNQR8RyV+32rR:JtdvPXYAudmq0yaeQSJdEN0s4WE+3K

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  1b6aa8915943a70498d802fd8f6923ec3de7b0c77aea9885f1e3c3c338f7c257N
- Size
  
  93KB
- MD5
  
  853ea945bcb3b71237b97d66bd0d7cb0
- SHA1
  
  8ed4c4ded6c4f5365e86fa8c6d94a6184bb3e46d
- SHA256
  
  1b6aa8915943a70498d802fd8f6923ec3de7b0c77aea9885f1e3c3c338f7c257
- SHA512
  
  9512ebde16e89a12952a54f21b49cf77b58314c0e618f91250ca2f1ca3d4db7d6f77d3cc69c7cdf544e5a7032266ba3c3484817b6801d1efc0e789ce29fc1fa5
- SSDEEP
  
  1536:JPlWYvCAXY0fudmOWn4F0y9sRQQRkRLJzeLD9N0iQGRNQR8RyV+32rR:JtdvPXYAudmq0yaeQSJdEN0s4WE+3K
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence