b90970049ed84352875b6588d336ffc7fa72c913878eaca119dea6a1eb0b3c52 | Triage

Sharing

General

Target

b90970049ed84352875b6588d336ffc7fa72c913878eaca119dea6a1eb0b3c52
Size

320KB
Sample

241122-d3rltatnds
MD5

7d5356ac62f75297dee9e9f6c0749c88
SHA1

970fbaccc8db9f2ad210413a41c41e4385a8681f
SHA256

b90970049ed84352875b6588d336ffc7fa72c913878eaca119dea6a1eb0b3c52
SHA512

d9d5068919786ee694297777e2f8fa6a576dc589d4ee07a53e7db7ee82de30943e13f4c8139304eef6d18542e7c26fec2747def49ecca1e8c885c184f7f77141
SSDEEP

3072:o/HsprsRNgA6IsY6U4wS/A4MK0FzJG/AMBxjUSmkCMQ/9h/NR5f0m:o/Hsp7/h64V/Ah1G/AcQ///NR5fn

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b90970049ed84352875b6588d336ffc7fa72c913878eaca119dea6a1eb0b3c52
- Size
  
  320KB
- MD5
  
  7d5356ac62f75297dee9e9f6c0749c88
- SHA1
  
  970fbaccc8db9f2ad210413a41c41e4385a8681f
- SHA256
  
  b90970049ed84352875b6588d336ffc7fa72c913878eaca119dea6a1eb0b3c52
- SHA512
  
  d9d5068919786ee694297777e2f8fa6a576dc589d4ee07a53e7db7ee82de30943e13f4c8139304eef6d18542e7c26fec2747def49ecca1e8c885c184f7f77141
- SSDEEP
  
  3072:o/HsprsRNgA6IsY6U4wS/A4MK0FzJG/AMBxjUSmkCMQ/9h/NR5f0m:o/Hsp7/h64V/Ah1G/AcQ///NR5fn
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence