8964e1764406ef579a05d9b2dd0c59624418f6a6e7b11ed320ebed5caaaab049 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8964e1764406ef579a05d9b2dd0c59624418f6a6e7b11ed320ebed5caaaab049N
Size

75KB
Sample

241008-1e8azsshmd
MD5

766312030bacfd23442a1fc947b97ce0
SHA1

c7810b44e8b8bb77a232d40f31ec500baf269988
SHA256

8964e1764406ef579a05d9b2dd0c59624418f6a6e7b11ed320ebed5caaaab049
SHA512

1e10de69070483592d32c0a26ce84c2f626e0d94b67dc765e0e0ec8e9001f5bd0c6171d4127d04c32efc4bb56c540e0bd07f4ec2c123b85a13ae61ed33647e82
SSDEEP

1536:nEsalTdSPVB6mbRmXmmWEl/5EOh2lEBEk5Q6zO53q52IrFH:XNPzmXmk7QlEBEj6zg3qv

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  8964e1764406ef579a05d9b2dd0c59624418f6a6e7b11ed320ebed5caaaab049N
- Size
  
  75KB
- MD5
  
  766312030bacfd23442a1fc947b97ce0
- SHA1
  
  c7810b44e8b8bb77a232d40f31ec500baf269988
- SHA256
  
  8964e1764406ef579a05d9b2dd0c59624418f6a6e7b11ed320ebed5caaaab049
- SHA512
  
  1e10de69070483592d32c0a26ce84c2f626e0d94b67dc765e0e0ec8e9001f5bd0c6171d4127d04c32efc4bb56c540e0bd07f4ec2c123b85a13ae61ed33647e82
- SSDEEP
  
  1536:nEsalTdSPVB6mbRmXmmWEl/5EOh2lEBEk5Q6zO53q52IrFH:XNPzmXmk7QlEBEj6zg3qv
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence