5b372d0bb6d655d9026ba63f94fac684ce628c4e3027b634c387656c60428e9a | Triage

Sharing

General

Target

5b372d0bb6d655d9026ba63f94fac684ce628c4e3027b634c387656c60428e9a
Size

49KB
Sample

241122-ad8bgswngn
MD5

dcac37fc3ba3a148bee6596718a3dd5b
SHA1

58969e001647a4251d529387c4ea34c9182e9ee8
SHA256

5b372d0bb6d655d9026ba63f94fac684ce628c4e3027b634c387656c60428e9a
SHA512

88c8f61cffaaa6bad23e0236f1d35b2847456312a04738453401196cb28eaae33672a9b240ab2c30bfb46d629103b5637137339cc47abbf237622f31e40c7507
SSDEEP

768:E6Y11ulmufGuweK8ukz6JjWH+1icry4KN4wSX7/1H5W42XdnhQ:E6gI/0LM6JisimD7xtIle

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  5b372d0bb6d655d9026ba63f94fac684ce628c4e3027b634c387656c60428e9a
- Size
  
  49KB
- MD5
  
  dcac37fc3ba3a148bee6596718a3dd5b
- SHA1
  
  58969e001647a4251d529387c4ea34c9182e9ee8
- SHA256
  
  5b372d0bb6d655d9026ba63f94fac684ce628c4e3027b634c387656c60428e9a
- SHA512
  
  88c8f61cffaaa6bad23e0236f1d35b2847456312a04738453401196cb28eaae33672a9b240ab2c30bfb46d629103b5637137339cc47abbf237622f31e40c7507
- SSDEEP
  
  768:E6Y11ulmufGuweK8ukz6JjWH+1icry4KN4wSX7/1H5W42XdnhQ:E6gI/0LM6JisimD7xtIle
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence