General

  • Target

    e2f693091a5a764ac8f886dfff61cd83a77579cff840bea8aee9977e06c89d05

  • Size

    302KB

  • Sample

    240701-ecltbavgna

  • MD5

    464a3658ad0a491dde5bc3d8a8327406

  • SHA1

    41de4e3db0cf5d1f5feefe394f3fc1fbd53f6b8b

  • SHA256

    e2f693091a5a764ac8f886dfff61cd83a77579cff840bea8aee9977e06c89d05

  • SHA512

    62296f66daa663d45c968cf73889aa84746d352370e801d0bb49801ebe09d16fcef95a251e71a637d7f1a90b804f09dcfab2a157d19be104884c6c4714bae300

  • SSDEEP

    6144:NKwu0baB5w0I93FF7fPtcsw6UJZqktbOUqCTGepXgbWH:VAun3FF7fFcsw6UJZqktbDqCTGepXgbW

Score
10/10

Malware Config

Targets

    • Target

      e2f693091a5a764ac8f886dfff61cd83a77579cff840bea8aee9977e06c89d05

    • Size

      302KB

    • MD5

      464a3658ad0a491dde5bc3d8a8327406

    • SHA1

      41de4e3db0cf5d1f5feefe394f3fc1fbd53f6b8b

    • SHA256

      e2f693091a5a764ac8f886dfff61cd83a77579cff840bea8aee9977e06c89d05

    • SHA512

      62296f66daa663d45c968cf73889aa84746d352370e801d0bb49801ebe09d16fcef95a251e71a637d7f1a90b804f09dcfab2a157d19be104884c6c4714bae300

    • SSDEEP

      6144:NKwu0baB5w0I93FF7fPtcsw6UJZqktbOUqCTGepXgbWH:VAun3FF7fFcsw6UJZqktbDqCTGepXgbW

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks