071c0a76ebe3608b9800a63e23d6155b7f371758c34f604ac2d0e4aee257d288 | Triage

Sharing

General

Target

071c0a76ebe3608b9800a63e23d6155b7f371758c34f604ac2d0e4aee257d288
Size

295KB
Sample

241120-yccees1fnb
MD5

d04b1eab160eec5858e6ee4fbe12d82a
SHA1

4ff5dc98bcab6ed564225d24cea112ece17e014d
SHA256

071c0a76ebe3608b9800a63e23d6155b7f371758c34f604ac2d0e4aee257d288
SHA512

519aafa280fff7da5f3ed7712ff3849a5e4b9396cc251682c89e4d044b33fd73c619003514fbec98590845cdf6843210cbf4c317ecae77801cf5bc710912fe41
SSDEEP

3072:trMHZ8ny/YIVgvo232fQ1UkY1UkVHe1rUtst76UtoUtFVgtRQ2c+tlB5xpWJLM75:tgHvolG41PY1PRe19V+tbFOLM77OLY

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  071c0a76ebe3608b9800a63e23d6155b7f371758c34f604ac2d0e4aee257d288
- Size
  
  295KB
- MD5
  
  d04b1eab160eec5858e6ee4fbe12d82a
- SHA1
  
  4ff5dc98bcab6ed564225d24cea112ece17e014d
- SHA256
  
  071c0a76ebe3608b9800a63e23d6155b7f371758c34f604ac2d0e4aee257d288
- SHA512
  
  519aafa280fff7da5f3ed7712ff3849a5e4b9396cc251682c89e4d044b33fd73c619003514fbec98590845cdf6843210cbf4c317ecae77801cf5bc710912fe41
- SSDEEP
  
  3072:trMHZ8ny/YIVgvo232fQ1UkY1UkVHe1rUtst76UtoUtFVgtRQ2c+tlB5xpWJLM75:tgHvolG41PY1PRe19V+tbFOLM77OLY
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence