c0b706ad68a7910a49aa6634350356caec40b725094d9a3d6c644a5da8907202 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0b706ad68a7910a49aa6634350356caec40b725094d9a3d6c644a5da8907202
Size

83KB
Sample

240419-kdnxysch27
MD5

62e32ac505e9e221041c657797aa600f
SHA1

3ee59a908b42b4c4d51ba2c9716fcbbee1a55f1a
SHA256

c0b706ad68a7910a49aa6634350356caec40b725094d9a3d6c644a5da8907202
SHA512

0d4efe32b7e109dce8f8ad582e56b1d3c11fa4dce4466b19467494a73c51db15f755b2ae362b9d43ae879b026b25987e43e886304134014abd31f6946cff4f20
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWObkYn7Y:GhfxHNIreQm+HiIkYn7Y

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  c0b706ad68a7910a49aa6634350356caec40b725094d9a3d6c644a5da8907202
- Size
  
  83KB
- MD5
  
  62e32ac505e9e221041c657797aa600f
- SHA1
  
  3ee59a908b42b4c4d51ba2c9716fcbbee1a55f1a
- SHA256
  
  c0b706ad68a7910a49aa6634350356caec40b725094d9a3d6c644a5da8907202
- SHA512
  
  0d4efe32b7e109dce8f8ad582e56b1d3c11fa4dce4466b19467494a73c51db15f755b2ae362b9d43ae879b026b25987e43e886304134014abd31f6946cff4f20
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWObkYn7Y:GhfxHNIreQm+HiIkYn7Y
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2