f238d436a005b23dca188b3f3b135f682bb5b38fdacebd02bfc741622bf50a3b | Triage

Sharing

General

Target

f238d436a005b23dca188b3f3b135f682bb5b38fdacebd02bfc741622bf50a3bN
Size

87KB
Sample

241009-1ggwtayfqa
MD5

d0b5554d192da44e8cc57890fb494ba0
SHA1

5503d819bb135731fd7a6b440e778a1e22cb40d4
SHA256

f238d436a005b23dca188b3f3b135f682bb5b38fdacebd02bfc741622bf50a3b
SHA512

a7e725d9de955c24adb91e7e7af761c220a6e062c9aa1ca283b6513d5c41f088c708310fb0b3dc04780de7ac803037c1c4b4235ac1803d54016c436963c5e73d
SSDEEP

1536:KXJqrMu44BXec4X9bOAPYGuyENDSRQ4fRSRBDNrR0RVe7R6R8RPD2zx:KZu5BXe5NSByleaAnDlmbGcGFDex

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f238d436a005b23dca188b3f3b135f682bb5b38fdacebd02bfc741622bf50a3bN
- Size
  
  87KB
- MD5
  
  d0b5554d192da44e8cc57890fb494ba0
- SHA1
  
  5503d819bb135731fd7a6b440e778a1e22cb40d4
- SHA256
  
  f238d436a005b23dca188b3f3b135f682bb5b38fdacebd02bfc741622bf50a3b
- SHA512
  
  a7e725d9de955c24adb91e7e7af761c220a6e062c9aa1ca283b6513d5c41f088c708310fb0b3dc04780de7ac803037c1c4b4235ac1803d54016c436963c5e73d
- SSDEEP
  
  1536:KXJqrMu44BXec4X9bOAPYGuyENDSRQ4fRSRBDNrR0RVe7R6R8RPD2zx:KZu5BXe5NSByleaAnDlmbGcGFDex
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence