71eb93441deae2ddf1a4dccbea9a32885d94e3b9d19ea39e52771c4c6181a819 | Triage

Sharing

General

Target

71eb93441deae2ddf1a4dccbea9a32885d94e3b9d19ea39e52771c4c6181a819
Size

734KB
Sample

221123-s186eacg68
MD5

1fe5b25b477190b9aad3d04c4220077e
SHA1

55b4b11bbffe885d5fcc54d4fdf5faf2f7aa0883
SHA256

71eb93441deae2ddf1a4dccbea9a32885d94e3b9d19ea39e52771c4c6181a819
SHA512

26e51147e63c66372919458782666a2e955c03cc7651ee816b2e1ba0ad1b817707801fcdf97c15a0b88a0800ece5f05b5e211f2419f84a518e10c1d729dbd855
SSDEEP

12288:UsA1mIRjZp9IyTFCMXSWEOIsgsg+8nS+K7u4k6ufmOQ/dcMFT9D+X2cXQx9:UsnIPp9IyTFC00OIswnS+6u4ktOOQeMV

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  71eb93441deae2ddf1a4dccbea9a32885d94e3b9d19ea39e52771c4c6181a819
- Size
  
  734KB
- MD5
  
  1fe5b25b477190b9aad3d04c4220077e
- SHA1
  
  55b4b11bbffe885d5fcc54d4fdf5faf2f7aa0883
- SHA256
  
  71eb93441deae2ddf1a4dccbea9a32885d94e3b9d19ea39e52771c4c6181a819
- SHA512
  
  26e51147e63c66372919458782666a2e955c03cc7651ee816b2e1ba0ad1b817707801fcdf97c15a0b88a0800ece5f05b5e211f2419f84a518e10c1d729dbd855
- SSDEEP
  
  12288:UsA1mIRjZp9IyTFCMXSWEOIsgsg+8nS+K7u4k6ufmOQ/dcMFT9D+X2cXQx9:UsnIPp9IyTFC00OIswnS+6u4ktOOQeMV
Score

10^/10

persistence
- Modifies system executable filetype association
  persistence
- Executes dropped EXE
- Modifies Installed Components in the registry
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Change Default File Association

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2