dd7553a0c1ae7073d3c373ff92c0ca789d2c68ae4f02c94f294087a16354550e | Triage

Sharing

General

Target

dd7553a0c1ae7073d3c373ff92c0ca789d2c68ae4f02c94f294087a16354550e
Size

49KB
Sample

241122-fh2x6avlbs
MD5

f2fc4aa199d150e9c624f7f1d77029df
SHA1

ea3f3f9cdbd083de739b1b1c8f7dc6e6fc9bd9f3
SHA256

dd7553a0c1ae7073d3c373ff92c0ca789d2c68ae4f02c94f294087a16354550e
SHA512

9cfff01aa9db646101c64d32722c6311b15b6619d9e810898b3170fec709e0bbb0b67ad00c0f474e90da588e5868cecb03ef18ba0574859be1ef4cb53a9f0a71
SSDEEP

768:ExQfunao+WeNb8b1mzDAKxI2I786w/1H5w2XdnhU:Eh7+WeNb8Jm4GpTHK

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  dd7553a0c1ae7073d3c373ff92c0ca789d2c68ae4f02c94f294087a16354550e
- Size
  
  49KB
- MD5
  
  f2fc4aa199d150e9c624f7f1d77029df
- SHA1
  
  ea3f3f9cdbd083de739b1b1c8f7dc6e6fc9bd9f3
- SHA256
  
  dd7553a0c1ae7073d3c373ff92c0ca789d2c68ae4f02c94f294087a16354550e
- SHA512
  
  9cfff01aa9db646101c64d32722c6311b15b6619d9e810898b3170fec709e0bbb0b67ad00c0f474e90da588e5868cecb03ef18ba0574859be1ef4cb53a9f0a71
- SSDEEP
  
  768:ExQfunao+WeNb8b1mzDAKxI2I786w/1H5w2XdnhU:Eh7+WeNb8Jm4GpTHK
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence