4909c9f7db0a89105b0774515aa9c444c302e8f882cc77c86c2acde5ce1e64a4 | Triage

Sharing

General

Target

4909c9f7db0a89105b0774515aa9c444c302e8f882cc77c86c2acde5ce1e64a4
Size

79KB
Sample

240308-ra95cahf5t
MD5

ceaf05386aec16b5aa9d189cae75e598
SHA1

fca454df5fb28024bccec71dc6d36163fbdb4ab7
SHA256

4909c9f7db0a89105b0774515aa9c444c302e8f882cc77c86c2acde5ce1e64a4
SHA512

55ed0de92d8fffceea35d43fae2b0edf99ac3ce20540bcd6fdf953e8053fe618b1aba0f15dcb38d9297ca62c7fc71882caba5a340dcb800b405a50395aafc996
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOV7F:GhfxHNIreQm+Him7F

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  4909c9f7db0a89105b0774515aa9c444c302e8f882cc77c86c2acde5ce1e64a4
- Size
  
  79KB
- MD5
  
  ceaf05386aec16b5aa9d189cae75e598
- SHA1
  
  fca454df5fb28024bccec71dc6d36163fbdb4ab7
- SHA256
  
  4909c9f7db0a89105b0774515aa9c444c302e8f882cc77c86c2acde5ce1e64a4
- SHA512
  
  55ed0de92d8fffceea35d43fae2b0edf99ac3ce20540bcd6fdf953e8053fe618b1aba0f15dcb38d9297ca62c7fc71882caba5a340dcb800b405a50395aafc996
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOV7F:GhfxHNIreQm+Him7F
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2