a3278d59437a9682dc3f23815db7a8d2d394b91ea0da1e3795e00fe178453934 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3278d59437a9682dc3f23815db7a8d2d394b91ea0da1e3795e00fe178453934N
Size

1.2MB
Sample

241014-ds3lbs1flr
MD5

dde2ee2331b00055088e10fb09ae7570
SHA1

40b8edf7ade46415b948afb1ab890cc2c79b918d
SHA256

a3278d59437a9682dc3f23815db7a8d2d394b91ea0da1e3795e00fe178453934
SHA512

fb93da610b478cc850b0d626b94362145388ec85da86d379c6ebf837472c4747a788965b510835beb9d6233ec0d91a79531ede2c69f036dff6d8f74cf4f7aa65
SSDEEP

24576:3Rwgu5YyCtCCm0BKh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YR:3Rwgu5RCtCXbazR0vk

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a3278d59437a9682dc3f23815db7a8d2d394b91ea0da1e3795e00fe178453934N
- Size
  
  1.2MB
- MD5
  
  dde2ee2331b00055088e10fb09ae7570
- SHA1
  
  40b8edf7ade46415b948afb1ab890cc2c79b918d
- SHA256
  
  a3278d59437a9682dc3f23815db7a8d2d394b91ea0da1e3795e00fe178453934
- SHA512
  
  fb93da610b478cc850b0d626b94362145388ec85da86d379c6ebf837472c4747a788965b510835beb9d6233ec0d91a79531ede2c69f036dff6d8f74cf4f7aa65
- SSDEEP
  
  24576:3Rwgu5YyCtCCm0BKh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YR:3Rwgu5RCtCXbazR0vk
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence