6f04976185ce8c4aacfa657c94911a39369233e4d3dcf2beb52613f16fe68f16 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f04976185ce8c4aacfa657c94911a39369233e4d3dcf2beb52613f16fe68f16
Size

96KB
Sample

241008-22ykqs1ajf
MD5

6b2b3a2e07c6699820c93e8cadfe58a5
SHA1

b358faf732effa4e56065be33df35694bc1fb116
SHA256

6f04976185ce8c4aacfa657c94911a39369233e4d3dcf2beb52613f16fe68f16
SHA512

be1b74fb2063e0caff687d7c0adc08f73fd2958b6f60316eb0147288a1fa5533c7893334648c7ef4abbc90b3667e7a2d841e610249a3d0873ecd63cecdad2ede
SSDEEP

1536:gVEaI6U4u361rL7VT5OT5KKXTOHSS2ZoHCWOJ72Lk1c0PXuhiTMuZXGTIVefVDkQ:oEa7U4/1rHtcTFXTOySY/MaFPXuhuXG9

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  6f04976185ce8c4aacfa657c94911a39369233e4d3dcf2beb52613f16fe68f16
- Size
  
  96KB
- MD5
  
  6b2b3a2e07c6699820c93e8cadfe58a5
- SHA1
  
  b358faf732effa4e56065be33df35694bc1fb116
- SHA256
  
  6f04976185ce8c4aacfa657c94911a39369233e4d3dcf2beb52613f16fe68f16
- SHA512
  
  be1b74fb2063e0caff687d7c0adc08f73fd2958b6f60316eb0147288a1fa5533c7893334648c7ef4abbc90b3667e7a2d841e610249a3d0873ecd63cecdad2ede
- SSDEEP
  
  1536:gVEaI6U4u361rL7VT5OT5KKXTOHSS2ZoHCWOJ72Lk1c0PXuhiTMuZXGTIVefVDkQ:oEa7U4/1rHtcTFXTOySY/MaFPXuhuXG9
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence