48bfe13e036b3628fe9cbfabfde8a193b268d5812feabc44a3448ab70d3713bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48bfe13e036b3628fe9cbfabfde8a193b268d5812feabc44a3448ab70d3713bbN
Size

91KB
Sample

241012-3dx5qsxbqf
MD5

a2d723367f76505937581871a311bbd0
SHA1

2b378d26273114610b99c4466be0dd5a7ac0c826
SHA256

48bfe13e036b3628fe9cbfabfde8a193b268d5812feabc44a3448ab70d3713bb
SHA512

531b96e2e431e4dc62f48838d1c471cfc417d9933fd5bcdca448e19b2e2f0c40904f97a1ea9f506830fcf2abad204569e93e46092446b03be5c1b1ddf5f41127
SSDEEP

1536:CU3yFNJcdPQoDEBh0GJx//m+WIEG25Hi6FoNGMJIVX/Yr/viVMi:xCFNJcdPz0hb/O+WL5C6qNGsGvo/vOMi

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  48bfe13e036b3628fe9cbfabfde8a193b268d5812feabc44a3448ab70d3713bbN
- Size
  
  91KB
- MD5
  
  a2d723367f76505937581871a311bbd0
- SHA1
  
  2b378d26273114610b99c4466be0dd5a7ac0c826
- SHA256
  
  48bfe13e036b3628fe9cbfabfde8a193b268d5812feabc44a3448ab70d3713bb
- SHA512
  
  531b96e2e431e4dc62f48838d1c471cfc417d9933fd5bcdca448e19b2e2f0c40904f97a1ea9f506830fcf2abad204569e93e46092446b03be5c1b1ddf5f41127
- SSDEEP
  
  1536:CU3yFNJcdPQoDEBh0GJx//m+WIEG25Hi6FoNGMJIVX/Yr/viVMi:xCFNJcdPz0hb/O+WL5C6qNGsGvo/vOMi
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence