6fb6d9cd9bc39abbb30ffcae63ab9816fa3e9ce0aba4940f9736c71a46a7629d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fb6d9cd9bc39abbb30ffcae63ab9816fa3e9ce0aba4940f9736c71a46a7629d
Size

82KB
Sample

230825-13kjtsgg2x
MD5

56db25d447bfeda4f2017dc218a2f29d
SHA1

1d2ce5633fdca0e5c644d987a4a8450f6ec008cb
SHA256

6fb6d9cd9bc39abbb30ffcae63ab9816fa3e9ce0aba4940f9736c71a46a7629d
SHA512

7a6ce57488596b0060255207d9b410ec8f574eaaa034cde0f28f1ebd29d94dd4ee3b722168aca77ef195351a9023c02a936afe8f89722ee321f899e23059247b
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOFGg:GhfxHNIreQm+Hi0Gg

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  6fb6d9cd9bc39abbb30ffcae63ab9816fa3e9ce0aba4940f9736c71a46a7629d
- Size
  
  82KB
- MD5
  
  56db25d447bfeda4f2017dc218a2f29d
- SHA1
  
  1d2ce5633fdca0e5c644d987a4a8450f6ec008cb
- SHA256
  
  6fb6d9cd9bc39abbb30ffcae63ab9816fa3e9ce0aba4940f9736c71a46a7629d
- SHA512
  
  7a6ce57488596b0060255207d9b410ec8f574eaaa034cde0f28f1ebd29d94dd4ee3b722168aca77ef195351a9023c02a936afe8f89722ee321f899e23059247b
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOFGg:GhfxHNIreQm+Hi0Gg
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2