2ed31085ebfde1576ac3a58f72fb351eddae7f0fcb28e3ab5eda06a20df1197a | Triage

Sharing

General

Target

2ed31085ebfde1576ac3a58f72fb351eddae7f0fcb28e3ab5eda06a20df1197a
Size

74KB
Sample

240512-gzrn7aff89
MD5

8f7b94e22a0a75b8ef25de61686ba4ce
SHA1

e11b13fb45b7dbaa83f349414f5f460eed8b26af
SHA256

2ed31085ebfde1576ac3a58f72fb351eddae7f0fcb28e3ab5eda06a20df1197a
SHA512

9ea65750c3890cd5bed002368105bcccb99be47e49a1ba5b796bf8e5c775fb17377b6a168ba22433236e0194250c0e5fda8d44304d2a78254b6e8a29a1a9f199
SSDEEP

768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWOOU:RshfSWHHNvoLqNwDDGw02eQmh0HjWOOU

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  2ed31085ebfde1576ac3a58f72fb351eddae7f0fcb28e3ab5eda06a20df1197a
- Size
  
  74KB
- MD5
  
  8f7b94e22a0a75b8ef25de61686ba4ce
- SHA1
  
  e11b13fb45b7dbaa83f349414f5f460eed8b26af
- SHA256
  
  2ed31085ebfde1576ac3a58f72fb351eddae7f0fcb28e3ab5eda06a20df1197a
- SHA512
  
  9ea65750c3890cd5bed002368105bcccb99be47e49a1ba5b796bf8e5c775fb17377b6a168ba22433236e0194250c0e5fda8d44304d2a78254b6e8a29a1a9f199
- SSDEEP
  
  768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWOOU:RshfSWHHNvoLqNwDDGw02eQmh0HjWOOU
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2