a3c2402464f721fecab3c788b64c1f9dc44a4107b7eb48926dad32571156be2d | Triage

Sharing

General

Target

a3c2402464f721fecab3c788b64c1f9dc44a4107b7eb48926dad32571156be2dN
Size

78KB
Sample

241012-wk5d3axglm
MD5

2231b82decdb1dbdf2c68d0850d14d60
SHA1

4f7ef07f9bdee022c2b972b78f041935f8d6d85f
SHA256

a3c2402464f721fecab3c788b64c1f9dc44a4107b7eb48926dad32571156be2d
SHA512

77f668befa007f3aa17a3b4497e2f7508c20a145413dd0d81f43be6268584c5a7f4eae250b37aeec4acf68fe2e80dae109db5dcca74e986af4a5bfea223af2ff
SSDEEP

1536:C0+JLLlxpmadSMvuINrT97oMiVnN+zL20gJi1ie:pSvAaaINrT97FiVngzL20WKt

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a3c2402464f721fecab3c788b64c1f9dc44a4107b7eb48926dad32571156be2dN
- Size
  
  78KB
- MD5
  
  2231b82decdb1dbdf2c68d0850d14d60
- SHA1
  
  4f7ef07f9bdee022c2b972b78f041935f8d6d85f
- SHA256
  
  a3c2402464f721fecab3c788b64c1f9dc44a4107b7eb48926dad32571156be2d
- SHA512
  
  77f668befa007f3aa17a3b4497e2f7508c20a145413dd0d81f43be6268584c5a7f4eae250b37aeec4acf68fe2e80dae109db5dcca74e986af4a5bfea223af2ff
- SSDEEP
  
  1536:C0+JLLlxpmadSMvuINrT97oMiVnN+zL20gJi1ie:pSvAaaINrT97FiVngzL20WKt
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence