f51bb080ceaed40d8a8104e77c82c47f9366a2c039a110ef4a32d93d204f3093 | Triage

Sharing

General

Target

f51bb080ceaed40d8a8104e77c82c47f9366a2c039a110ef4a32d93d204f3093.exe
Size

482KB
Sample

241119-qjj4vaxclq
MD5

8a0682545b3ec539976e1688c6d9b918
SHA1

ce5ccade4a9bb2ee2a80d761497fd14ad5880900
SHA256

f51bb080ceaed40d8a8104e77c82c47f9366a2c039a110ef4a32d93d204f3093
SHA512

255e040ca53b8a953ca76b2d8b86ac441e0fa7e972f4a5cca097a0d1efd162954e189b29cc2dc277bf11e684e91fb3ffea0d7ff209b98b382225cc5865a3bcf4
SSDEEP

6144:rL2KAn4IWsLl+wGXAF2PbgKLVGFM6234lKm3mo8Yvi4KsLTFM6234lKm3m:bAn4ULMwGXAF5KLVGFB24lwR45FB24lw

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f51bb080ceaed40d8a8104e77c82c47f9366a2c039a110ef4a32d93d204f3093.exe
- Size
  
  482KB
- MD5
  
  8a0682545b3ec539976e1688c6d9b918
- SHA1
  
  ce5ccade4a9bb2ee2a80d761497fd14ad5880900
- SHA256
  
  f51bb080ceaed40d8a8104e77c82c47f9366a2c039a110ef4a32d93d204f3093
- SHA512
  
  255e040ca53b8a953ca76b2d8b86ac441e0fa7e972f4a5cca097a0d1efd162954e189b29cc2dc277bf11e684e91fb3ffea0d7ff209b98b382225cc5865a3bcf4
- SSDEEP
  
  6144:rL2KAn4IWsLl+wGXAF2PbgKLVGFM6234lKm3mo8Yvi4KsLTFM6234lKm3m:bAn4ULMwGXAF5KLVGFB24lwR45FB24lw
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence