9fd18465bf3002b2dff2822dc599c6531cc1ac66518b3150f6325fe12d9c2425 | Triage

Sharing

General

Target

9fd18465bf3002b2dff2822dc599c6531cc1ac66518b3150f6325fe12d9c2425
Size

320KB
Sample

241122-c3g7psspes
MD5

f53718bb085b13b9a0a6fcc9d62f70c4
SHA1

0ad2c5af6fe524016feea6c2b5c557be50986de9
SHA256

9fd18465bf3002b2dff2822dc599c6531cc1ac66518b3150f6325fe12d9c2425
SHA512

46fb279cb6ea607df99e1cd2b511684c373349bbd0a8324393a9d07240ef92459f10a5ba9ebee2523d1b0cac9b275d7527f1692cb933524aed8e2b2de5cc7a6d
SSDEEP

6144:f/lHAsVQ///NR5fLvQ///NREQ///NR5fLYG3eujj:fNTw/Nq/NZ/NcZq

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  9fd18465bf3002b2dff2822dc599c6531cc1ac66518b3150f6325fe12d9c2425
- Size
  
  320KB
- MD5
  
  f53718bb085b13b9a0a6fcc9d62f70c4
- SHA1
  
  0ad2c5af6fe524016feea6c2b5c557be50986de9
- SHA256
  
  9fd18465bf3002b2dff2822dc599c6531cc1ac66518b3150f6325fe12d9c2425
- SHA512
  
  46fb279cb6ea607df99e1cd2b511684c373349bbd0a8324393a9d07240ef92459f10a5ba9ebee2523d1b0cac9b275d7527f1692cb933524aed8e2b2de5cc7a6d
- SSDEEP
  
  6144:f/lHAsVQ///NR5fLvQ///NREQ///NR5fLYG3eujj:fNTw/Nq/NZ/NcZq
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence