316dd752a85562dd662e4729a1ccc4d50a44f5ec64cacae29ae6e3f79541a4b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

316dd752a85562dd662e4729a1ccc4d50a44f5ec64cacae29ae6e3f79541a4b9N
Size

224KB
Sample

241013-lchvzsygpc
MD5

48c760f565051af5f76b187858624c10
SHA1

0c9cef35bcc09d9603633cd5ac3729ca6d230a7e
SHA256

316dd752a85562dd662e4729a1ccc4d50a44f5ec64cacae29ae6e3f79541a4b9
SHA512

2497924f2a87597b2d858abc13733adf8c4f41b70bcaaabe6e225ad122e84ef3a303f014716794581bf60a14d339bb08c96ed622fa36ff403791d0a6a5604e28
SSDEEP

6144:mUWBLGBC3/j2DO4rQD85k/hQO+zrWnAdqjeOpKff:aGkorQg5W/+zrWAI5KH

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  316dd752a85562dd662e4729a1ccc4d50a44f5ec64cacae29ae6e3f79541a4b9N
- Size
  
  224KB
- MD5
  
  48c760f565051af5f76b187858624c10
- SHA1
  
  0c9cef35bcc09d9603633cd5ac3729ca6d230a7e
- SHA256
  
  316dd752a85562dd662e4729a1ccc4d50a44f5ec64cacae29ae6e3f79541a4b9
- SHA512
  
  2497924f2a87597b2d858abc13733adf8c4f41b70bcaaabe6e225ad122e84ef3a303f014716794581bf60a14d339bb08c96ed622fa36ff403791d0a6a5604e28
- SSDEEP
  
  6144:mUWBLGBC3/j2DO4rQD85k/hQO+zrWnAdqjeOpKff:aGkorQg5W/+zrWAI5KH
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence