General

  • Target

    e21eda755c51615b4a672a6766563f5ad100ad9c96f774cd702b5056b7e1ce5f

  • Size

    160KB

  • Sample

    240701-ebe95sydln

  • MD5

    dc4a4d2cab015bb641e5b94892b9eaf2

  • SHA1

    b5a1ee99cf4d8ed8445f557976fbf8f499d324cf

  • SHA256

    e21eda755c51615b4a672a6766563f5ad100ad9c96f774cd702b5056b7e1ce5f

  • SHA512

    58c301b038cc52c1ee499959ed46847886b24ce4c87f2d08751deadcd22e6b7c2b83db61f34f233cea4b59506859825c8a5c919a7e47b86c7d2d41296c9906e4

  • SSDEEP

    3072:U0kRybEMz4tFMoeZStgb3a3+X13XRzrgHq/Wp+YmKfxgQdxvr:U3R7k4tu9ZSa7aOl3BzrUmKyIxT

Score
10/10

Malware Config

Targets

    • Target

      e21eda755c51615b4a672a6766563f5ad100ad9c96f774cd702b5056b7e1ce5f

    • Size

      160KB

    • MD5

      dc4a4d2cab015bb641e5b94892b9eaf2

    • SHA1

      b5a1ee99cf4d8ed8445f557976fbf8f499d324cf

    • SHA256

      e21eda755c51615b4a672a6766563f5ad100ad9c96f774cd702b5056b7e1ce5f

    • SHA512

      58c301b038cc52c1ee499959ed46847886b24ce4c87f2d08751deadcd22e6b7c2b83db61f34f233cea4b59506859825c8a5c919a7e47b86c7d2d41296c9906e4

    • SSDEEP

      3072:U0kRybEMz4tFMoeZStgb3a3+X13XRzrgHq/Wp+YmKfxgQdxvr:U3R7k4tu9ZSa7aOl3BzrUmKyIxT

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks