327bdfe2dbe0341cd5a6a8e09529d4d5978f824bca07cf3675d76a33ef2843b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

327bdfe2dbe0341cd5a6a8e09529d4d5978f824bca07cf3675d76a33ef2843b6
Size

341KB
Sample

221029-f6be4scga7
MD5

6245122a19c32c314a2745188d41bcbc
SHA1

c19a348909e8f586a9ac9b52036bd41557e2ce45
SHA256

327bdfe2dbe0341cd5a6a8e09529d4d5978f824bca07cf3675d76a33ef2843b6
SHA512

f8135ae7751695b6db9afffcc5be4f9e91b8925b68aea6736ead410417218152dbfa9b8503deb6d38f6a76e0185cb3372043594c7f8419704d78164952b7eb34
SSDEEP

6144:MRAhhJxX7bNIKTQEgjX6mH/0guFK+s53RbAg0xqj3YR783L/zLP:UsALwmf0g2nsLAg0DRQb/P

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  327bdfe2dbe0341cd5a6a8e09529d4d5978f824bca07cf3675d76a33ef2843b6
- Size
  
  341KB
- MD5
  
  6245122a19c32c314a2745188d41bcbc
- SHA1
  
  c19a348909e8f586a9ac9b52036bd41557e2ce45
- SHA256
  
  327bdfe2dbe0341cd5a6a8e09529d4d5978f824bca07cf3675d76a33ef2843b6
- SHA512
  
  f8135ae7751695b6db9afffcc5be4f9e91b8925b68aea6736ead410417218152dbfa9b8503deb6d38f6a76e0185cb3372043594c7f8419704d78164952b7eb34
- SSDEEP
  
  6144:MRAhhJxX7bNIKTQEgjX6mH/0guFK+s53RbAg0xqj3YR783L/zLP:UsALwmf0g2nsLAg0DRQb/P
Score

10^/10

persistence
- Modifies system executable filetype association
  persistence
- Executes dropped EXE
- Modifies Installed Components in the registry
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Change Default File Association

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2