862266b98c2bdf9d77f909d5f07dd1b9020cf57fc01bfcd4f4345197804722c3 | Triage

Sharing

General

Target

862266b98c2bdf9d77f909d5f07dd1b9020cf57fc01bfcd4f4345197804722c3
Size

125KB
Sample

241122-bxl32a1pby
MD5

f2ccee58b5b591a4d23987390ce01e05
SHA1

8e7944b4dd91b34b63d8f0982f6056fce6aaa20a
SHA256

862266b98c2bdf9d77f909d5f07dd1b9020cf57fc01bfcd4f4345197804722c3
SHA512

7abc72c021a080586fcbdbc6f987f734c70d86ce2657af6e0556aa60ec6a5307f67f657cfed9ac2c5c39c376f14dc7873dac91237997d9870c2eb499985e71dd
SSDEEP

3072:nvKMFPm9K7fV7IHg1cA1WdTCn93OGey/ZhJakrPF:n3F+9KTV7ig1cfTCndOGeKTaG

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  862266b98c2bdf9d77f909d5f07dd1b9020cf57fc01bfcd4f4345197804722c3
- Size
  
  125KB
- MD5
  
  f2ccee58b5b591a4d23987390ce01e05
- SHA1
  
  8e7944b4dd91b34b63d8f0982f6056fce6aaa20a
- SHA256
  
  862266b98c2bdf9d77f909d5f07dd1b9020cf57fc01bfcd4f4345197804722c3
- SHA512
  
  7abc72c021a080586fcbdbc6f987f734c70d86ce2657af6e0556aa60ec6a5307f67f657cfed9ac2c5c39c376f14dc7873dac91237997d9870c2eb499985e71dd
- SSDEEP
  
  3072:nvKMFPm9K7fV7IHg1cA1WdTCn93OGey/ZhJakrPF:n3F+9KTV7ig1cfTCndOGeKTaG
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence