32afe7f91e0e4ef46893e428a79da863fd9d67f4bbbab104cbd302f71af7ce56 | Triage

Sharing

General

Target

32afe7f91e0e4ef46893e428a79da863fd9d67f4bbbab104cbd302f71af7ce56N
Size

88KB
Sample

241031-kbbjvasqhy
MD5

c0f9bd60a8b889092b4f298f2b4b1a20
SHA1

d7c12e3782792f892bb86bc3e4e140c33e8b5a3d
SHA256

32afe7f91e0e4ef46893e428a79da863fd9d67f4bbbab104cbd302f71af7ce56
SHA512

dc927115331a72d75c137def757baeb4550d31743c5f2f66c4f7b8e249cf98fc4ec23f7fa93c782be91861dca7a97fc435800ded69c4a57247fb24ee0d140fbb
SSDEEP

1536:Mm4SaWys5m9Fzzn9HvQm2OVnauZewFL8QOVXtE1ukVd71rFZO7+90vi:5ys5m9d9HvQmD3ZdLi9EIIJ15ZO7Va

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  32afe7f91e0e4ef46893e428a79da863fd9d67f4bbbab104cbd302f71af7ce56N
- Size
  
  88KB
- MD5
  
  c0f9bd60a8b889092b4f298f2b4b1a20
- SHA1
  
  d7c12e3782792f892bb86bc3e4e140c33e8b5a3d
- SHA256
  
  32afe7f91e0e4ef46893e428a79da863fd9d67f4bbbab104cbd302f71af7ce56
- SHA512
  
  dc927115331a72d75c137def757baeb4550d31743c5f2f66c4f7b8e249cf98fc4ec23f7fa93c782be91861dca7a97fc435800ded69c4a57247fb24ee0d140fbb
- SSDEEP
  
  1536:Mm4SaWys5m9Fzzn9HvQm2OVnauZewFL8QOVXtE1ukVd71rFZO7+90vi:5ys5m9d9HvQmD3ZdLi9EIIJ15ZO7Va
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence