0f95639654a2aecaa9b924cebb94d63d8efa10ebbc72195cdfa4c86137a68ddf | Triage

Sharing

General

Target

0f95639654a2aecaa9b924cebb94d63d8efa10ebbc72195cdfa4c86137a68ddf.exe
Size

350KB
Sample

241120-ef5etszene
MD5

075d3b92a542f78d7dbc3e81602ec8b3
SHA1

1dd44d3b14ae5fdf6af23c496365b6214d64561e
SHA256

0f95639654a2aecaa9b924cebb94d63d8efa10ebbc72195cdfa4c86137a68ddf
SHA512

ea80e4133dc108f431915e15f1424b9e6c2e7899dffd7e33f2179c0cbf4d36270320ede893fb90b4bac689c05112b509fdd48c69c3c04dcd1637f73ce8f011c1
SSDEEP

6144:sv+/sib5stpHVILifyeYVDcfflXpX6LRifyeYVDct:y+UibyHyefyeYCdXpXZfyeYI

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  0f95639654a2aecaa9b924cebb94d63d8efa10ebbc72195cdfa4c86137a68ddf.exe
- Size
  
  350KB
- MD5
  
  075d3b92a542f78d7dbc3e81602ec8b3
- SHA1
  
  1dd44d3b14ae5fdf6af23c496365b6214d64561e
- SHA256
  
  0f95639654a2aecaa9b924cebb94d63d8efa10ebbc72195cdfa4c86137a68ddf
- SHA512
  
  ea80e4133dc108f431915e15f1424b9e6c2e7899dffd7e33f2179c0cbf4d36270320ede893fb90b4bac689c05112b509fdd48c69c3c04dcd1637f73ce8f011c1
- SSDEEP
  
  6144:sv+/sib5stpHVILifyeYVDcfflXpX6LRifyeYVDct:y+UibyHyefyeYCdXpXZfyeYI
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence