ec87276074083160eedb9004de7e4cb879d6662b9404eecc16c16f2a52ebc614 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec87276074083160eedb9004de7e4cb879d6662b9404eecc16c16f2a52ebc614
Size

79KB
Sample

231012-b2hw6sad65
MD5

6f8769926269c69b3d27e4a7851d2763
SHA1

39d7839269a804b55dc3b68d947d8c1acb0cfd23
SHA256

ec87276074083160eedb9004de7e4cb879d6662b9404eecc16c16f2a52ebc614
SHA512

e771b47e9e2c20029df1467c6adf5eeb58ae3f2d0a4ddb43c17c2d231eb6477decbdb899199ee70c7d056b920967434fee038910f24caf84e53e8779acf1ec3b
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWO0p/:GhfxHNIreQm+Hi5p/

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  ec87276074083160eedb9004de7e4cb879d6662b9404eecc16c16f2a52ebc614
- Size
  
  79KB
- MD5
  
  6f8769926269c69b3d27e4a7851d2763
- SHA1
  
  39d7839269a804b55dc3b68d947d8c1acb0cfd23
- SHA256
  
  ec87276074083160eedb9004de7e4cb879d6662b9404eecc16c16f2a52ebc614
- SHA512
  
  e771b47e9e2c20029df1467c6adf5eeb58ae3f2d0a4ddb43c17c2d231eb6477decbdb899199ee70c7d056b920967434fee038910f24caf84e53e8779acf1ec3b
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWO0p/:GhfxHNIreQm+Hi5p/
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2