bfd3efeddbdbdc28954e2b73d51c670db61c26c6b48a77b70a5280b7ccffa1c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfd3efeddbdbdc28954e2b73d51c670db61c26c6b48a77b70a5280b7ccffa1c7
Size

763KB
Sample

221020-1jjhesfffk
MD5

963716cdf16160ab4dcff82584b5b380
SHA1

e361e56c9505f29f58dee3e81b4ad03a58e309bd
SHA256

bfd3efeddbdbdc28954e2b73d51c670db61c26c6b48a77b70a5280b7ccffa1c7
SHA512

293f506b10a7af4f40f4935b054004e8a4eddb37ca9cbe281bb2dfd5645c6785b74fffc288b56397dc661799108714d9e30cbe57d474edffce4896b7662ac8cc
SSDEEP

12288:UsAAPaPUD18t/R/OgRs6dBFnD0YvK2CSzfC26NE44oT/TEgIUpxT+zJpdW6qVB64:UsMP7tMEs6dfoYvZfmiDo8gpl+92dBdN

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  bfd3efeddbdbdc28954e2b73d51c670db61c26c6b48a77b70a5280b7ccffa1c7
- Size
  
  763KB
- MD5
  
  963716cdf16160ab4dcff82584b5b380
- SHA1
  
  e361e56c9505f29f58dee3e81b4ad03a58e309bd
- SHA256
  
  bfd3efeddbdbdc28954e2b73d51c670db61c26c6b48a77b70a5280b7ccffa1c7
- SHA512
  
  293f506b10a7af4f40f4935b054004e8a4eddb37ca9cbe281bb2dfd5645c6785b74fffc288b56397dc661799108714d9e30cbe57d474edffce4896b7662ac8cc
- SSDEEP
  
  12288:UsAAPaPUD18t/R/OgRs6dBFnD0YvK2CSzfC26NE44oT/TEgIUpxT+zJpdW6qVB64:UsMP7tMEs6dfoYvZfmiDo8gpl+92dBdN
Score

10^/10

persistence
- Modifies system executable filetype association
  persistence
- Executes dropped EXE
- Modifies Installed Components in the registry
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Change Default File Association

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2