2790c68a9f9158ada1db2a2640c195e0b7a4df31a0f3cced8f7420bbc0ba2c74 | Triage

Sharing

General

Target

2790c68a9f9158ada1db2a2640c195e0b7a4df31a0f3cced8f7420bbc0ba2c74
Size

74KB
Sample

231013-zlmgesbf56
MD5

4771cffe19e2018f976be1065d387922
SHA1

81dfb0ca6db479819dbf4bd09245489adc51053d
SHA256

2790c68a9f9158ada1db2a2640c195e0b7a4df31a0f3cced8f7420bbc0ba2c74
SHA512

78250c723a4df089b2d9789aa33c38d6d59f483ad84cfd46633878f337d2bc479eea0e4096a1c0fd5f4474e5dba9a2eb2f9d1ebf5b92d22501f668bfe08b57fd
SSDEEP

768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWOSa:RshfSWHHNvoLqNwDDGw02eQmh0HjWOSa

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  2790c68a9f9158ada1db2a2640c195e0b7a4df31a0f3cced8f7420bbc0ba2c74
- Size
  
  74KB
- MD5
  
  4771cffe19e2018f976be1065d387922
- SHA1
  
  81dfb0ca6db479819dbf4bd09245489adc51053d
- SHA256
  
  2790c68a9f9158ada1db2a2640c195e0b7a4df31a0f3cced8f7420bbc0ba2c74
- SHA512
  
  78250c723a4df089b2d9789aa33c38d6d59f483ad84cfd46633878f337d2bc479eea0e4096a1c0fd5f4474e5dba9a2eb2f9d1ebf5b92d22501f668bfe08b57fd
- SSDEEP
  
  768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWOSa:RshfSWHHNvoLqNwDDGw02eQmh0HjWOSa
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2