98cdf9280fd6449b15e2b3d519841439bd60e3198e471dbbae8ecbba35339b2e | Triage

Sharing

General

Target

98cdf9280fd6449b15e2b3d519841439bd60e3198e471dbbae8ecbba35339b2eN
Size

56KB
Sample

241012-pxdzba1cla
MD5

8fbd55a5c56d992a67250188dea506f0
SHA1

1b8387cd4701c84ce21f24a5d873752f02dbde09
SHA256

98cdf9280fd6449b15e2b3d519841439bd60e3198e471dbbae8ecbba35339b2e
SHA512

d2af17d34e6a1bff287eb585c66bc99c6dd01bb325eb96eabd6a41b55cdc75fb49547777ac4d6461e18b256e5a759b33460f1174473468841db488b6608d04fc
SSDEEP

768:PlGGcRxO4sksBUEm1Hk3CjV3dBEsZy1I+58tsW4pahGmItOxL+KnoRuk3yv4Avjf:PEa4LJkSjVjEsoy+58clmItOxL3dv4

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  98cdf9280fd6449b15e2b3d519841439bd60e3198e471dbbae8ecbba35339b2eN
- Size
  
  56KB
- MD5
  
  8fbd55a5c56d992a67250188dea506f0
- SHA1
  
  1b8387cd4701c84ce21f24a5d873752f02dbde09
- SHA256
  
  98cdf9280fd6449b15e2b3d519841439bd60e3198e471dbbae8ecbba35339b2e
- SHA512
  
  d2af17d34e6a1bff287eb585c66bc99c6dd01bb325eb96eabd6a41b55cdc75fb49547777ac4d6461e18b256e5a759b33460f1174473468841db488b6608d04fc
- SSDEEP
  
  768:PlGGcRxO4sksBUEm1Hk3CjV3dBEsZy1I+58tsW4pahGmItOxL+KnoRuk3yv4Avjf:PEa4LJkSjVjEsoy+58clmItOxL3dv4
Score

8^/10

discovery persistence
- Server Software Component: Terminal Services DLL
  persistence
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence