314867a415704b50c2d4d29c2d0feae6e821de7a668099f42ffa820d87fe7eaf | Triage

Sharing

General

Target

314867a415704b50c2d4d29c2d0feae6e821de7a668099f42ffa820d87fe7eaf
Size

609KB
Sample

221123-s2ps6afh5z
MD5

6e117c257d557128b5204ae7b607851b
SHA1

eec7cac30807765166fa5925ff62026f5284874b
SHA256

314867a415704b50c2d4d29c2d0feae6e821de7a668099f42ffa820d87fe7eaf
SHA512

aaf93802518b9791c241fb6022fbb39008f2df3c28835e3bea984329b51ff6283f560e11857e5b100c62166bea7890828082068333c63c08abf82627e3272143
SSDEEP

12288:UsAL/W5L/SZdSCvTF+bDTqXTa7vuJhUauiAzDTbrwdtZZiSXSmbrfrOe4:UsW/WNSZ8CLGETfJma6ziteE5brf8

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  314867a415704b50c2d4d29c2d0feae6e821de7a668099f42ffa820d87fe7eaf
- Size
  
  609KB
- MD5
  
  6e117c257d557128b5204ae7b607851b
- SHA1
  
  eec7cac30807765166fa5925ff62026f5284874b
- SHA256
  
  314867a415704b50c2d4d29c2d0feae6e821de7a668099f42ffa820d87fe7eaf
- SHA512
  
  aaf93802518b9791c241fb6022fbb39008f2df3c28835e3bea984329b51ff6283f560e11857e5b100c62166bea7890828082068333c63c08abf82627e3272143
- SSDEEP
  
  12288:UsAL/W5L/SZdSCvTF+bDTqXTa7vuJhUauiAzDTbrwdtZZiSXSmbrfrOe4:UsW/WNSZ8CLGETfJma6ziteE5brf8
Score

10^/10

persistence
- Modifies system executable filetype association
  persistence
- Executes dropped EXE
- Modifies Installed Components in the registry
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Change Default File Association

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2