162aab9f88fdc5b7a2d7bd8820800ecdf5dfc31dd63fb60118c63d5aee001dc6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

162aab9f88fdc5b7a2d7bd8820800ecdf5dfc31dd63fb60118c63d5aee001dc6
Size

76KB
Sample

231013-2fldaafc56
MD5

412b6af01f6f2bc9e9a51c59ccdf3011
SHA1

9971ee02504e2a839158cfe35bf734a7bca58825
SHA256

162aab9f88fdc5b7a2d7bd8820800ecdf5dfc31dd63fb60118c63d5aee001dc6
SHA512

41a2a1ea4cc0c1d9b2d77f65ca462899c29b9ca090a163073a7aa2e46fe159f5053aac92c0520b23ec9b3928509680356cb9ef90b20230f50ccf552ed4c5b3a5
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOaTh:GhfxHNIreQm+Hi3Th

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  162aab9f88fdc5b7a2d7bd8820800ecdf5dfc31dd63fb60118c63d5aee001dc6
- Size
  
  76KB
- MD5
  
  412b6af01f6f2bc9e9a51c59ccdf3011
- SHA1
  
  9971ee02504e2a839158cfe35bf734a7bca58825
- SHA256
  
  162aab9f88fdc5b7a2d7bd8820800ecdf5dfc31dd63fb60118c63d5aee001dc6
- SHA512
  
  41a2a1ea4cc0c1d9b2d77f65ca462899c29b9ca090a163073a7aa2e46fe159f5053aac92c0520b23ec9b3928509680356cb9ef90b20230f50ccf552ed4c5b3a5
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOaTh:GhfxHNIreQm+Hi3Th
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2