381ccfb890b1dbf60da3f3c8c837c7f5e37e4711d8609feb404dc2316623feac | Triage

Sharing

General

Target

381ccfb890b1dbf60da3f3c8c837c7f5e37e4711d8609feb404dc2316623feac
Size

78KB
Sample

231012-fgbdtafh31
MD5

4e0e06bf5106df9509df7eec0a468e9f
SHA1

2ed435d867fdff1a75d351c46dcf49eefbe568a5
SHA256

381ccfb890b1dbf60da3f3c8c837c7f5e37e4711d8609feb404dc2316623feac
SHA512

810220fa443cc3ce03974c915a9aa228463a45f6fad7dbf794d6ae5cefdcfdf1641896f90f93e23eeaea8ad705edecb74df439a3daf34f9f373406eac8ae3409
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOtjR96:GhfxHNIreQm+HiGjR96

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  381ccfb890b1dbf60da3f3c8c837c7f5e37e4711d8609feb404dc2316623feac
- Size
  
  78KB
- MD5
  
  4e0e06bf5106df9509df7eec0a468e9f
- SHA1
  
  2ed435d867fdff1a75d351c46dcf49eefbe568a5
- SHA256
  
  381ccfb890b1dbf60da3f3c8c837c7f5e37e4711d8609feb404dc2316623feac
- SHA512
  
  810220fa443cc3ce03974c915a9aa228463a45f6fad7dbf794d6ae5cefdcfdf1641896f90f93e23eeaea8ad705edecb74df439a3daf34f9f373406eac8ae3409
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOtjR96:GhfxHNIreQm+HiGjR96
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2