b7f713ba08b8cae310d0de2aa2ccbe7834fab8fa3eb43db3515fd7813b4f0261 | Triage

Sharing

General

Target

b7f713ba08b8cae310d0de2aa2ccbe7834fab8fa3eb43db3515fd7813b4f0261N
Size

893KB
Sample

241031-j8v43ssqcw
MD5

e64593f349210b16768b8e015d7476f0
SHA1

fa8b716e96236481aec60c486b071888ac800c9c
SHA256

b7f713ba08b8cae310d0de2aa2ccbe7834fab8fa3eb43db3515fd7813b4f0261
SHA512

a8e0a226334fe674fe64b798e144ced103209982a47f97d0ab53bcb0c2d09c28ba1e7be8262a616eb7fec6663ad883698717dd240ae5d99dca198971a2c3a79a
SSDEEP

6144:rjlRgAgO1vJehzXjOYpui6yYPaIGckpyWO63t5YNpui6yYPaIGckhNR0tHK:r5RaO1hCzXjOYpV6yYPI3cpV6yYPOR00

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b7f713ba08b8cae310d0de2aa2ccbe7834fab8fa3eb43db3515fd7813b4f0261N
- Size
  
  893KB
- MD5
  
  e64593f349210b16768b8e015d7476f0
- SHA1
  
  fa8b716e96236481aec60c486b071888ac800c9c
- SHA256
  
  b7f713ba08b8cae310d0de2aa2ccbe7834fab8fa3eb43db3515fd7813b4f0261
- SHA512
  
  a8e0a226334fe674fe64b798e144ced103209982a47f97d0ab53bcb0c2d09c28ba1e7be8262a616eb7fec6663ad883698717dd240ae5d99dca198971a2c3a79a
- SSDEEP
  
  6144:rjlRgAgO1vJehzXjOYpui6yYPaIGckpyWO63t5YNpui6yYPaIGckhNR0tHK:r5RaO1hCzXjOYpV6yYPI3cpV6yYPOR00
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence