5600cc9fb610c170e225f9c43cd5e54592e5c7dec9e959582bf6f76fe3cc0a72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5600cc9fb610c170e225f9c43cd5e54592e5c7dec9e959582bf6f76fe3cc0a72
Size

82KB
Sample

230827-vxg9maca73
MD5

fd59bc6e2b4efd33e4806a5989b179b7
SHA1

f079a9fa184fc6f18f2fe2aebe539069d32a003f
SHA256

5600cc9fb610c170e225f9c43cd5e54592e5c7dec9e959582bf6f76fe3cc0a72
SHA512

b94ae279fcb3ad2648c3924d550bf69e13e43016ce76132518abe91c5fbdbae53597ba85cdc3e628b1cf98f306622f38b1dc7a7077b3ff10f066a061fb6ed967
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWON36:GhfxHNIreQm+Hi636

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  5600cc9fb610c170e225f9c43cd5e54592e5c7dec9e959582bf6f76fe3cc0a72
- Size
  
  82KB
- MD5
  
  fd59bc6e2b4efd33e4806a5989b179b7
- SHA1
  
  f079a9fa184fc6f18f2fe2aebe539069d32a003f
- SHA256
  
  5600cc9fb610c170e225f9c43cd5e54592e5c7dec9e959582bf6f76fe3cc0a72
- SHA512
  
  b94ae279fcb3ad2648c3924d550bf69e13e43016ce76132518abe91c5fbdbae53597ba85cdc3e628b1cf98f306622f38b1dc7a7077b3ff10f066a061fb6ed967
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWON36:GhfxHNIreQm+Hi636
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2