5d6b33bddf484879283b26ee5390ea84e28a4ded1b3b8469a15d4dc8732606c0 | Triage

Sharing

General

Target

5d6b33bddf484879283b26ee5390ea84e28a4ded1b3b8469a15d4dc8732606c0
Size

78KB
Sample

230901-d25r2sca6w
MD5

f693d06b6ba25e27c1cdd6a3083ff314
SHA1

b3f2b88cd6362cb37608b2ac7ef7073cd6b24f7a
SHA256

5d6b33bddf484879283b26ee5390ea84e28a4ded1b3b8469a15d4dc8732606c0
SHA512

9f167fee3ae58beeb1b0ce26323bcacac0610ec0e73cb9077c5faa40c56139d8d17e6bd649757e69185ffebda9798fd2edc97e83dccd395f4291e92b87b641f2
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOwsI8:GhfxHNIreQm+Hi/sI8

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  5d6b33bddf484879283b26ee5390ea84e28a4ded1b3b8469a15d4dc8732606c0
- Size
  
  78KB
- MD5
  
  f693d06b6ba25e27c1cdd6a3083ff314
- SHA1
  
  b3f2b88cd6362cb37608b2ac7ef7073cd6b24f7a
- SHA256
  
  5d6b33bddf484879283b26ee5390ea84e28a4ded1b3b8469a15d4dc8732606c0
- SHA512
  
  9f167fee3ae58beeb1b0ce26323bcacac0610ec0e73cb9077c5faa40c56139d8d17e6bd649757e69185ffebda9798fd2edc97e83dccd395f4291e92b87b641f2
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOwsI8:GhfxHNIreQm+Hi/sI8
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2