General

  • Target

    ea11d82530f2779f4e21d5a9f20d9f036a8d0060f9302d18f7bb4cc6f43cb35b

  • Size

    96KB

  • Sample

    240701-er315swbrh

  • MD5

    ef78bdab275eee0afa073853657972c5

  • SHA1

    a92cd7a0477d2a25efc4e521f935b3e2415a6e77

  • SHA256

    ea11d82530f2779f4e21d5a9f20d9f036a8d0060f9302d18f7bb4cc6f43cb35b

  • SHA512

    52f104499d315cef8e1102bfbbcf55c44f1629457564acb1eec9026233ba7e9eb4ee9a26b4d8e7c0ed9ed4e9a4a0cd608419edeeab3b76302b51d0d55641d737

  • SSDEEP

    1536:nZzKk446hBPnrLgPn3wJ4BUy2LzaIZTJ+7LhkiB0MPiKeEAgH:Uk440PnA/wJSU/zaMU7uihJ5

Score
10/10

Malware Config

Targets

    • Target

      ea11d82530f2779f4e21d5a9f20d9f036a8d0060f9302d18f7bb4cc6f43cb35b

    • Size

      96KB

    • MD5

      ef78bdab275eee0afa073853657972c5

    • SHA1

      a92cd7a0477d2a25efc4e521f935b3e2415a6e77

    • SHA256

      ea11d82530f2779f4e21d5a9f20d9f036a8d0060f9302d18f7bb4cc6f43cb35b

    • SHA512

      52f104499d315cef8e1102bfbbcf55c44f1629457564acb1eec9026233ba7e9eb4ee9a26b4d8e7c0ed9ed4e9a4a0cd608419edeeab3b76302b51d0d55641d737

    • SSDEEP

      1536:nZzKk446hBPnrLgPn3wJ4BUy2LzaIZTJ+7LhkiB0MPiKeEAgH:Uk440PnA/wJSU/zaMU7uihJ5

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks