84376b03ef23971d42e746df7bd3c4ae43e992895aff07a31692dcd6528dfb4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84376b03ef23971d42e746df7bd3c4ae43e992895aff07a31692dcd6528dfb4cN
Size

128KB
Sample

241013-xzr8qaxhpr
MD5

2cd190cd2d1338df1dbb91a3ef4d0e00
SHA1

7e3ae18e4c9bdf22782449e341571404f0c78842
SHA256

84376b03ef23971d42e746df7bd3c4ae43e992895aff07a31692dcd6528dfb4c
SHA512

a8066cdaef47d6faac1f7b657cdec2fccfcd6fbd703f969ed1f9e5873a5c33f0f0e2f81f2f15274714cd83484763ea63aa897a489dd85cda714644c7c33c1a55
SSDEEP

3072:1PoymIbJjNb9jAq6oym/PwidSX3ReDrFDHZtOgxBOXXH:1wVIbJjtpAq6gP7dSX3RO5tTDUX

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  84376b03ef23971d42e746df7bd3c4ae43e992895aff07a31692dcd6528dfb4cN
- Size
  
  128KB
- MD5
  
  2cd190cd2d1338df1dbb91a3ef4d0e00
- SHA1
  
  7e3ae18e4c9bdf22782449e341571404f0c78842
- SHA256
  
  84376b03ef23971d42e746df7bd3c4ae43e992895aff07a31692dcd6528dfb4c
- SHA512
  
  a8066cdaef47d6faac1f7b657cdec2fccfcd6fbd703f969ed1f9e5873a5c33f0f0e2f81f2f15274714cd83484763ea63aa897a489dd85cda714644c7c33c1a55
- SSDEEP
  
  3072:1PoymIbJjNb9jAq6oym/PwidSX3ReDrFDHZtOgxBOXXH:1wVIbJjtpAq6gP7dSX3RO5tTDUX
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence