b9e68e02f9a98106c51ef36ad10029e4dc8fceaebd5b4f903e1a3ad7fd0a27eb | Triage

Sharing

General

Target

b9e68e02f9a98106c51ef36ad10029e4dc8fceaebd5b4f903e1a3ad7fd0a27eb
Size

82KB
Sample

231012-p68v2sch77
MD5

95cff6a83b1881f8e64fd1968dbb0329
SHA1

651ee0d92a2c845faf23b9419a8022cefdaa4e0d
SHA256

b9e68e02f9a98106c51ef36ad10029e4dc8fceaebd5b4f903e1a3ad7fd0a27eb
SHA512

c499b101165efd25b25649a7e048e614e87db4f7ea37b92d2691087edb62f4e6e2fb74e204eb77a19d1f7a5c4e60e087e60bcecf373c0adb0b9a47c080fe18cf
SSDEEP

768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWOKr:RshfSWHHNvoLqNwDDGw02eQmh0HjWOKr

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  b9e68e02f9a98106c51ef36ad10029e4dc8fceaebd5b4f903e1a3ad7fd0a27eb
- Size
  
  82KB
- MD5
  
  95cff6a83b1881f8e64fd1968dbb0329
- SHA1
  
  651ee0d92a2c845faf23b9419a8022cefdaa4e0d
- SHA256
  
  b9e68e02f9a98106c51ef36ad10029e4dc8fceaebd5b4f903e1a3ad7fd0a27eb
- SHA512
  
  c499b101165efd25b25649a7e048e614e87db4f7ea37b92d2691087edb62f4e6e2fb74e204eb77a19d1f7a5c4e60e087e60bcecf373c0adb0b9a47c080fe18cf
- SSDEEP
  
  768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWOKr:RshfSWHHNvoLqNwDDGw02eQmh0HjWOKr
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2