0325bb5d819a2bcf618f6b597ea8b3ce897bfeab416e0da6914d20446e177cf5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0325bb5d819a2bcf618f6b597ea8b3ce897bfeab416e0da6914d20446e177cf5
Size

82KB
Sample

231013-dvjk8scc6t
MD5

1eed14c3d0d8c0e23a77e4b6bbf2d479
SHA1

a6c7a95c9d0abd1072fd492ef3f93ffaf52dd209
SHA256

0325bb5d819a2bcf618f6b597ea8b3ce897bfeab416e0da6914d20446e177cf5
SHA512

a6ba6377dc4dc0f72c0a14cd60b212dc8493c0467dc12604f949e3dd17b721f78626a4898d3ca8fb69cd9e12b02da90920da07789f9302090b05b130e0dda0d7
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOHt0g0f9:GhfxHNIreQm+Hiet0g0f9

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  0325bb5d819a2bcf618f6b597ea8b3ce897bfeab416e0da6914d20446e177cf5
- Size
  
  82KB
- MD5
  
  1eed14c3d0d8c0e23a77e4b6bbf2d479
- SHA1
  
  a6c7a95c9d0abd1072fd492ef3f93ffaf52dd209
- SHA256
  
  0325bb5d819a2bcf618f6b597ea8b3ce897bfeab416e0da6914d20446e177cf5
- SHA512
  
  a6ba6377dc4dc0f72c0a14cd60b212dc8493c0467dc12604f949e3dd17b721f78626a4898d3ca8fb69cd9e12b02da90920da07789f9302090b05b130e0dda0d7
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOHt0g0f9:GhfxHNIreQm+Hiet0g0f9
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2