ecbf445d21e0ef7ba92872aed995697f9745f496d5eb7ec324fa90e88ce36463 | Triage

Sharing

General

Target

ecbf445d21e0ef7ba92872aed995697f9745f496d5eb7ec324fa90e88ce36463
Size

288KB
Sample

221123-s1jkracg27
MD5

f459537efbf1f59e4e83758ca1f7bd63
SHA1

e483ac32abdc5fa7931f092acab5fd84597b0f18
SHA256

ecbf445d21e0ef7ba92872aed995697f9745f496d5eb7ec324fa90e88ce36463
SHA512

1004ae317d32960b7131d8841a52d27cfbbe9d6efaec2963f6f946cc1256123d2dc54050426f28502179ad57db533a2a76de22e876b0b839afb89a6e66a16b63
SSDEEP

6144:MRAhhJxX7bNIAROzTuft0Mt+til+XDVLaYVc3hD9sbDRPtgA6Mn9:UsAAPF0Mt+Il+zfVeethn9

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  ecbf445d21e0ef7ba92872aed995697f9745f496d5eb7ec324fa90e88ce36463
- Size
  
  288KB
- MD5
  
  f459537efbf1f59e4e83758ca1f7bd63
- SHA1
  
  e483ac32abdc5fa7931f092acab5fd84597b0f18
- SHA256
  
  ecbf445d21e0ef7ba92872aed995697f9745f496d5eb7ec324fa90e88ce36463
- SHA512
  
  1004ae317d32960b7131d8841a52d27cfbbe9d6efaec2963f6f946cc1256123d2dc54050426f28502179ad57db533a2a76de22e876b0b839afb89a6e66a16b63
- SSDEEP
  
  6144:MRAhhJxX7bNIAROzTuft0Mt+til+XDVLaYVc3hD9sbDRPtgA6Mn9:UsAAPF0Mt+Il+zfVeethn9
Score

10^/10

persistence
- Modifies system executable filetype association
  persistence
- Executes dropped EXE
- Modifies Installed Components in the registry
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Change Default File Association

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2