af2f0fb2b10e5dc4a7a316e5bbc393441db560d93724db4c5670ef859c425fdc | Triage

Sharing

General

Target

af2f0fb2b10e5dc4a7a316e5bbc393441db560d93724db4c5670ef859c425fdc
Size

79KB
Sample

230903-yphf7scc85
MD5

904141da52235490c7a75173931aca43
SHA1

48053d298633af8a916226065395b51f4006bcf8
SHA256

af2f0fb2b10e5dc4a7a316e5bbc393441db560d93724db4c5670ef859c425fdc
SHA512

ebcc209b9a3eac389792d659c8605cfcfaa1a03bbe7d149e3d9241e531687b9b007266927dae45907621cedcce2f62ce259d593366d87dda45627f8940ada835
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOXs4MdY:GhfxHNIreQm+Hias4MdY

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  af2f0fb2b10e5dc4a7a316e5bbc393441db560d93724db4c5670ef859c425fdc
- Size
  
  79KB
- MD5
  
  904141da52235490c7a75173931aca43
- SHA1
  
  48053d298633af8a916226065395b51f4006bcf8
- SHA256
  
  af2f0fb2b10e5dc4a7a316e5bbc393441db560d93724db4c5670ef859c425fdc
- SHA512
  
  ebcc209b9a3eac389792d659c8605cfcfaa1a03bbe7d149e3d9241e531687b9b007266927dae45907621cedcce2f62ce259d593366d87dda45627f8940ada835
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOXs4MdY:GhfxHNIreQm+Hias4MdY
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2