b3dcc1714ab07a529a9e7f4addd1aa13fda97470098c0f2f970719440f8d9e5b | Triage

Sharing

General

Target

b3dcc1714ab07a529a9e7f4addd1aa13fda97470098c0f2f970719440f8d9e5b
Size

359KB
Sample

241122-drzs2szjgj
MD5

704d768ff428a804b992d608645c1809
SHA1

37ab66c00d1e8402bde5e9292eca64bf23876b2f
SHA256

b3dcc1714ab07a529a9e7f4addd1aa13fda97470098c0f2f970719440f8d9e5b
SHA512

84973b2a28a7c55fa553555450161e54cabf4bf71290eaff977537ae779c52e13d480eb53733101d13080bc7887ae4cfd267b641dbcee7dfb03400e3e6d0327a
SSDEEP

6144:FmjvZfkZKdPYVrOigcC6oQ6+EcC6oQ6+YahBQyiTACPTRN6+YahBQyiTAgiuMRl0:FJICK9E6n9E6vah6yiMCPTRN6vah6yiB

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b3dcc1714ab07a529a9e7f4addd1aa13fda97470098c0f2f970719440f8d9e5b
- Size
  
  359KB
- MD5
  
  704d768ff428a804b992d608645c1809
- SHA1
  
  37ab66c00d1e8402bde5e9292eca64bf23876b2f
- SHA256
  
  b3dcc1714ab07a529a9e7f4addd1aa13fda97470098c0f2f970719440f8d9e5b
- SHA512
  
  84973b2a28a7c55fa553555450161e54cabf4bf71290eaff977537ae779c52e13d480eb53733101d13080bc7887ae4cfd267b641dbcee7dfb03400e3e6d0327a
- SSDEEP
  
  6144:FmjvZfkZKdPYVrOigcC6oQ6+EcC6oQ6+YahBQyiTACPTRN6+YahBQyiTAgiuMRl0:FJICK9E6n9E6vah6yiMCPTRN6vah6yiB
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence