18273f4027a664986f7728645a3fd94bad73db38113d139d7a0b4477f4710543 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18273f4027a664986f7728645a3fd94bad73db38113d139d7a0b4477f4710543
Size

87KB
Sample

241014-xrcs3a1drb
MD5

f7162deaf9dbc93240f63fac3799a0d4
SHA1

bd9284eb430b625680502170ca3fc96527abb951
SHA256

18273f4027a664986f7728645a3fd94bad73db38113d139d7a0b4477f4710543
SHA512

366283e8566ac2cc5e96e7fa682e76e5bfe1c35e7327a26a8b3c3f6a3bda5b8093a6a2cd6452fd10cda116b82f77ed711791f41b81ace9976a8e60640278a15e
SSDEEP

1536:IGgj2vQkgt0XLCyh/eOMJ8IsqbvFvmoKq1BZ69RQ4uiRSRBDNrR0RVe7R6R8RPDA:IG7Ik+07CySPxbdu4BZieniAnDlmbGch

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  18273f4027a664986f7728645a3fd94bad73db38113d139d7a0b4477f4710543
- Size
  
  87KB
- MD5
  
  f7162deaf9dbc93240f63fac3799a0d4
- SHA1
  
  bd9284eb430b625680502170ca3fc96527abb951
- SHA256
  
  18273f4027a664986f7728645a3fd94bad73db38113d139d7a0b4477f4710543
- SHA512
  
  366283e8566ac2cc5e96e7fa682e76e5bfe1c35e7327a26a8b3c3f6a3bda5b8093a6a2cd6452fd10cda116b82f77ed711791f41b81ace9976a8e60640278a15e
- SSDEEP
  
  1536:IGgj2vQkgt0XLCyh/eOMJ8IsqbvFvmoKq1BZ69RQ4uiRSRBDNrR0RVe7R6R8RPDA:IG7Ik+07CySPxbdu4BZieniAnDlmbGch
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence