e49235e6052b75ed46dba5c4359028a90a445e37aab52e5725fe5d005dafe57c | Triage

Sharing

General

Target

e49235e6052b75ed46dba5c4359028a90a445e37aab52e5725fe5d005dafe57c
Size

78KB
Sample

240521-rl6w3agh61
MD5

a7d61ab6c655d8bfb5d9804d6a010dd2
SHA1

eecedf39de8c1c73059b56d8e4df651f771a634d
SHA256

e49235e6052b75ed46dba5c4359028a90a445e37aab52e5725fe5d005dafe57c
SHA512

7061b1615557815eebf94c621a7e7916c26e11c1b384ddd5c452b8e0fa675f4e4d2a13f327616012aed44eb23b835d49f2457b26b4fa7914bd4efb397d0e3e04
SSDEEP

768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWOt2:RshfSWHHNvoLqNwDDGw02eQmh0HjWOQ

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  e49235e6052b75ed46dba5c4359028a90a445e37aab52e5725fe5d005dafe57c
- Size
  
  78KB
- MD5
  
  a7d61ab6c655d8bfb5d9804d6a010dd2
- SHA1
  
  eecedf39de8c1c73059b56d8e4df651f771a634d
- SHA256
  
  e49235e6052b75ed46dba5c4359028a90a445e37aab52e5725fe5d005dafe57c
- SHA512
  
  7061b1615557815eebf94c621a7e7916c26e11c1b384ddd5c452b8e0fa675f4e4d2a13f327616012aed44eb23b835d49f2457b26b4fa7914bd4efb397d0e3e04
- SSDEEP
  
  768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWOt2:RshfSWHHNvoLqNwDDGw02eQmh0HjWOQ
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2