87b2cb7d6ced62304a077275bec229b6ecbb0b4f2858a5a8bdd18c0ba74aeab9 | Triage

Sharing

General

Target

87b2cb7d6ced62304a077275bec229b6ecbb0b4f2858a5a8bdd18c0ba74aeab9
Size

5.5MB
Sample

240512-ayb4sagb21
MD5

0441a0212c03479aa575e57a55bce133
SHA1

899216e609c7120ffb61fb8bf76e99bc9adc772c
SHA256

87b2cb7d6ced62304a077275bec229b6ecbb0b4f2858a5a8bdd18c0ba74aeab9
SHA512

407c52f8ede74690d505e88dd4ba2170a985a3402975dd9362327d9b0ed1a96b06c1035868371e1683a6c8b7011b87475b526c680097d2057ebcb71570b7a1be
SSDEEP

98304:oseHlHdc5b9dXLVi2xIb7S1fw7pXyZ7oz0R5uz0rbJagkW7kOLIx1qxz8hjFrZBz:Bem17h10XvwPhagz7q2wNPQ00Y

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  87b2cb7d6ced62304a077275bec229b6ecbb0b4f2858a5a8bdd18c0ba74aeab9
- Size
  
  5.5MB
- MD5
  
  0441a0212c03479aa575e57a55bce133
- SHA1
  
  899216e609c7120ffb61fb8bf76e99bc9adc772c
- SHA256
  
  87b2cb7d6ced62304a077275bec229b6ecbb0b4f2858a5a8bdd18c0ba74aeab9
- SHA512
  
  407c52f8ede74690d505e88dd4ba2170a985a3402975dd9362327d9b0ed1a96b06c1035868371e1683a6c8b7011b87475b526c680097d2057ebcb71570b7a1be
- SSDEEP
  
  98304:oseHlHdc5b9dXLVi2xIb7S1fw7pXyZ7oz0R5uz0rbJagkW7kOLIx1qxz8hjFrZBz:Bem17h10XvwPhagz7q2wNPQ00Y
Score

8^/10

persistence
- Sets file execution options in registry
  persistence
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2