dfbe7f7552b8b471fe4b17d4ff78fe9a78d16af4ca82b4e6643be22b19aa472a | Triage

Sharing

General

Target

dfbe7f7552b8b471fe4b17d4ff78fe9a78d16af4ca82b4e6643be22b19aa472a
Size

252KB
Sample

241121-lx173a1hjp
MD5

40d24eeab4bf0108ef85472b095c83f9
SHA1

1a9c823ae5f090063dd69697ecb5e4c423395d2a
SHA256

dfbe7f7552b8b471fe4b17d4ff78fe9a78d16af4ca82b4e6643be22b19aa472a
SHA512

7b025d7fc909d2a5f67f5e118f5a8d1c5fd38aa2fa9ffc2d6d5ebf5a97c17784c12c107b193e11c0d27b7f64580ad7b8e296bf4a304c46b12fac759f6d9a44cd
SSDEEP

6144:r7lNs03h33GBGyYWgBOhF9Oa5WfWNOSbGqJBHA:Hl3hGBGy7Vj9p4SW

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  dfbe7f7552b8b471fe4b17d4ff78fe9a78d16af4ca82b4e6643be22b19aa472a
- Size
  
  252KB
- MD5
  
  40d24eeab4bf0108ef85472b095c83f9
- SHA1
  
  1a9c823ae5f090063dd69697ecb5e4c423395d2a
- SHA256
  
  dfbe7f7552b8b471fe4b17d4ff78fe9a78d16af4ca82b4e6643be22b19aa472a
- SHA512
  
  7b025d7fc909d2a5f67f5e118f5a8d1c5fd38aa2fa9ffc2d6d5ebf5a97c17784c12c107b193e11c0d27b7f64580ad7b8e296bf4a304c46b12fac759f6d9a44cd
- SSDEEP
  
  6144:r7lNs03h33GBGyYWgBOhF9Oa5WfWNOSbGqJBHA:Hl3hGBGy7Vj9p4SW
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation