b5ad509230bc40e7cf8d048b44edf5270b1b41f1310174db1d7fe013664b0d7f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5ad509230bc40e7cf8d048b44edf5270b1b41f1310174db1d7fe013664b0d7f
Size

464KB
Sample

241012-cahb1a1bkq
MD5

34041b7924dcaf60d230f82d26718100
SHA1

70d9a7c6f0b2983f1dd50b30c0204d2aab2621a1
SHA256

b5ad509230bc40e7cf8d048b44edf5270b1b41f1310174db1d7fe013664b0d7f
SHA512

7b373d1651a1277c38bb7f7224444edc1d36592f990ba13845146704f1bbf9b93f5afbcaf17c97b7e0081ca653d7effe1faa6949290e0390a08c9691fe5d75e1
SSDEEP

6144:fQaIOKRwXEOIIIPCn4EOIuIPJEOOcHTETKEOIIIPC:YuvEVI2C4EVu2JEVcBEVI2C

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b5ad509230bc40e7cf8d048b44edf5270b1b41f1310174db1d7fe013664b0d7f
- Size
  
  464KB
- MD5
  
  34041b7924dcaf60d230f82d26718100
- SHA1
  
  70d9a7c6f0b2983f1dd50b30c0204d2aab2621a1
- SHA256
  
  b5ad509230bc40e7cf8d048b44edf5270b1b41f1310174db1d7fe013664b0d7f
- SHA512
  
  7b373d1651a1277c38bb7f7224444edc1d36592f990ba13845146704f1bbf9b93f5afbcaf17c97b7e0081ca653d7effe1faa6949290e0390a08c9691fe5d75e1
- SSDEEP
  
  6144:fQaIOKRwXEOIIIPCn4EOIuIPJEOOcHTETKEOIIIPC:YuvEVI2C4EVu2JEVcBEVI2C
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence