7a42cc2f8d2df9d2f886b98ceba8e32a1e399c2a0a4d5f3c6351c8ec4e4097cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a42cc2f8d2df9d2f886b98ceba8e32a1e399c2a0a4d5f3c6351c8ec4e4097cc
Size

81KB
Sample

240420-y2ynysgh87
MD5

9689d384749ee9885a1ab50fca3eafb7
SHA1

87f5ff4fa9a77a86e531d050a6220587800e8fd6
SHA256

7a42cc2f8d2df9d2f886b98ceba8e32a1e399c2a0a4d5f3c6351c8ec4e4097cc
SHA512

2b727b6a6276194b41d55ff81ec61708a900eef2f02a6f98d209389e70394e8f1852650180b15e01e2770bac6a2349e592bd7bae35062b441fc4c809a81dab09
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOIoJ2T7ZPp8X9PTiD:GhfxHNIreQm+HiyuD

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  7a42cc2f8d2df9d2f886b98ceba8e32a1e399c2a0a4d5f3c6351c8ec4e4097cc
- Size
  
  81KB
- MD5
  
  9689d384749ee9885a1ab50fca3eafb7
- SHA1
  
  87f5ff4fa9a77a86e531d050a6220587800e8fd6
- SHA256
  
  7a42cc2f8d2df9d2f886b98ceba8e32a1e399c2a0a4d5f3c6351c8ec4e4097cc
- SHA512
  
  2b727b6a6276194b41d55ff81ec61708a900eef2f02a6f98d209389e70394e8f1852650180b15e01e2770bac6a2349e592bd7bae35062b441fc4c809a81dab09
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOIoJ2T7ZPp8X9PTiD:GhfxHNIreQm+HiyuD
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2