601edf26aab06bfce0421df04cf88fa64fd32e0348cdd79592a2b4a77f179a44 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

601edf26aab06bfce0421df04cf88fa64fd32e0348cdd79592a2b4a77f179a44
Size

78KB
Sample

231012-j1msqsac88
MD5

9757885bbc55ece904d7be1ba46b6d81
SHA1

194389dcc1ed776c9aa04fa4babf7faed448c318
SHA256

601edf26aab06bfce0421df04cf88fa64fd32e0348cdd79592a2b4a77f179a44
SHA512

887ab1738a58a1f9111dbe93cdb9a0bf3865143849d71e5c092ddd037888398455b6890b15e82afd2693aef8995efa9273ac83dff12a1b29fb33233557d4393d
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOPiTbv:GhfxHNIreQm+HiYiTbv

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  601edf26aab06bfce0421df04cf88fa64fd32e0348cdd79592a2b4a77f179a44
- Size
  
  78KB
- MD5
  
  9757885bbc55ece904d7be1ba46b6d81
- SHA1
  
  194389dcc1ed776c9aa04fa4babf7faed448c318
- SHA256
  
  601edf26aab06bfce0421df04cf88fa64fd32e0348cdd79592a2b4a77f179a44
- SHA512
  
  887ab1738a58a1f9111dbe93cdb9a0bf3865143849d71e5c092ddd037888398455b6890b15e82afd2693aef8995efa9273ac83dff12a1b29fb33233557d4393d
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOPiTbv:GhfxHNIreQm+HiYiTbv
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2