d6cedd61d575e9193f85648f68aeaa2414e0a5710b659a5894f9c6107c7c0bd5 | Triage

Sharing

General

Target

d6cedd61d575e9193f85648f68aeaa2414e0a5710b659a5894f9c6107c7c0bd5
Size

79KB
Sample

240520-cxf3fsga6v
MD5

e72cd49ad0842e4f3ac030999d5ca1cc
SHA1

77d57b2dd8e87fd7b9de6f8209f257989c91c48c
SHA256

d6cedd61d575e9193f85648f68aeaa2414e0a5710b659a5894f9c6107c7c0bd5
SHA512

d5b96ec68b674adce6bb6735fde59d756bb4d3e562f71f8870b6cc28db8028e7008e3ae583b1e6fb87fed1087fa23d52a91f11e9998691963459c9ee28aca2c5
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOx/c9:GhfxHNIreQm+Hia/c9

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  d6cedd61d575e9193f85648f68aeaa2414e0a5710b659a5894f9c6107c7c0bd5
- Size
  
  79KB
- MD5
  
  e72cd49ad0842e4f3ac030999d5ca1cc
- SHA1
  
  77d57b2dd8e87fd7b9de6f8209f257989c91c48c
- SHA256
  
  d6cedd61d575e9193f85648f68aeaa2414e0a5710b659a5894f9c6107c7c0bd5
- SHA512
  
  d5b96ec68b674adce6bb6735fde59d756bb4d3e562f71f8870b6cc28db8028e7008e3ae583b1e6fb87fed1087fa23d52a91f11e9998691963459c9ee28aca2c5
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOx/c9:GhfxHNIreQm+Hia/c9
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2