903722e5c5716a8513af3ec9fa1e508258c2adb051a71353b7d2af6cd1fd5989 | Triage

Sharing

General

Target

903722e5c5716a8513af3ec9fa1e508258c2adb051a71353b7d2af6cd1fd5989N
Size

376KB
Sample

241011-yew7lszfmh
MD5

ed2ac2c94b14daf2a627ad47f7ea7fb0
SHA1

90064fc4534583a38a4214c18e09884c8c4a1687
SHA256

903722e5c5716a8513af3ec9fa1e508258c2adb051a71353b7d2af6cd1fd5989
SHA512

f1f2aa799a3c0ad377e58a602c1e692fd6f3e16038bd4a23807466cdb416095c8f9e1e9d12a3a9e6c4207a7453172b86c34123049c72cf22765348620a52891a
SSDEEP

6144:declNljfMC7oQ0IV/Atl/AtW1OE43V1+25CzRoQ0Ibl4HdE43V1+2:dRN50I2mi4lCzb0IF4

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  903722e5c5716a8513af3ec9fa1e508258c2adb051a71353b7d2af6cd1fd5989N
- Size
  
  376KB
- MD5
  
  ed2ac2c94b14daf2a627ad47f7ea7fb0
- SHA1
  
  90064fc4534583a38a4214c18e09884c8c4a1687
- SHA256
  
  903722e5c5716a8513af3ec9fa1e508258c2adb051a71353b7d2af6cd1fd5989
- SHA512
  
  f1f2aa799a3c0ad377e58a602c1e692fd6f3e16038bd4a23807466cdb416095c8f9e1e9d12a3a9e6c4207a7453172b86c34123049c72cf22765348620a52891a
- SSDEEP
  
  6144:declNljfMC7oQ0IV/Atl/AtW1OE43V1+25CzRoQ0Ibl4HdE43V1+2:dRN50I2mi4lCzb0IF4
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence