99e7205e41d6f191e6ce862ad5e398b60f4c4aaeb7e2f70320e8cb6ab71cafb0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99e7205e41d6f191e6ce862ad5e398b60f4c4aaeb7e2f70320e8cb6ab71cafb0
Size

81KB
Sample

240425-nga22sab92
MD5

2db75a8265b2780013c32aa1d2c9d5b2
SHA1

fe6ab18ea9159a167969f1abcba3d546a470d822
SHA256

99e7205e41d6f191e6ce862ad5e398b60f4c4aaeb7e2f70320e8cb6ab71cafb0
SHA512

297920e5a514f3d0972fd4d9e36de1b88a9b37d98966df32891cfc5be55d35674bd1338274a2633074cd823ff5c130db900d5ba4a8287d82f9026c78e973f4f9
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOn5PakC:GhfxHNIreQm+HiM5PakC

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  99e7205e41d6f191e6ce862ad5e398b60f4c4aaeb7e2f70320e8cb6ab71cafb0
- Size
  
  81KB
- MD5
  
  2db75a8265b2780013c32aa1d2c9d5b2
- SHA1
  
  fe6ab18ea9159a167969f1abcba3d546a470d822
- SHA256
  
  99e7205e41d6f191e6ce862ad5e398b60f4c4aaeb7e2f70320e8cb6ab71cafb0
- SHA512
  
  297920e5a514f3d0972fd4d9e36de1b88a9b37d98966df32891cfc5be55d35674bd1338274a2633074cd823ff5c130db900d5ba4a8287d82f9026c78e973f4f9
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOn5PakC:GhfxHNIreQm+HiM5PakC
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2