General

  • Target

    e72e957eb764aff54949e38a6c12c6949a5d6592105cdd0ec149a3c211eabd32

  • Size

    896KB

  • Sample

    240701-ekd4fayfnk

  • MD5

    462e9955330082212d9f8032ebbd90c4

  • SHA1

    582978d87029698c38cbe03baf40d84bf0ecc08e

  • SHA256

    e72e957eb764aff54949e38a6c12c6949a5d6592105cdd0ec149a3c211eabd32

  • SHA512

    8ac243b4ce62b0b62bcecf0d9e4f6dc0ca8b21344ce8f4c3baaf5d4eb73f3e60740085a65b204e940fa1e40f57f3388909968b34da83b99bc683f19606083183

  • SSDEEP

    12288:PuVByvNv54B9f01ZmHByvNv5VwLonfBHLqF1Nw5ILonfByvNv5HV:Pu+vr4B9f01ZmQvrUENOVvr1

Score
10/10

Malware Config

Targets

    • Target

      e72e957eb764aff54949e38a6c12c6949a5d6592105cdd0ec149a3c211eabd32

    • Size

      896KB

    • MD5

      462e9955330082212d9f8032ebbd90c4

    • SHA1

      582978d87029698c38cbe03baf40d84bf0ecc08e

    • SHA256

      e72e957eb764aff54949e38a6c12c6949a5d6592105cdd0ec149a3c211eabd32

    • SHA512

      8ac243b4ce62b0b62bcecf0d9e4f6dc0ca8b21344ce8f4c3baaf5d4eb73f3e60740085a65b204e940fa1e40f57f3388909968b34da83b99bc683f19606083183

    • SSDEEP

      12288:PuVByvNv54B9f01ZmHByvNv5VwLonfBHLqF1Nw5ILonfByvNv5HV:Pu+vr4B9f01ZmQvrUENOVvr1

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks