fb76bd897f55da2ecc6d930add16b5aefe66d1cde2d4c7fcdd5e9ec4f5f92955 | Triage

Sharing

General

Target

fb76bd897f55da2ecc6d930add16b5aefe66d1cde2d4c7fcdd5e9ec4f5f92955
Size

75KB
Sample

240521-x2rd7sfg8s
MD5

2a7f43a125dd19d2d722e2902486ff9b
SHA1

00befa4561515b0a01988a6859c66ca4dafa2d44
SHA256

fb76bd897f55da2ecc6d930add16b5aefe66d1cde2d4c7fcdd5e9ec4f5f92955
SHA512

c6864dd1e91bebeeb27bb273780bc357f18ca6979b3dcd7f49f92b98fd954ef7634bd6eebb6b9b06f16743b5fd10702c89df02490f6b9b252480cb6bba5fa7f8
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOfFe:GhfxHNIreQm+HiEFe

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  fb76bd897f55da2ecc6d930add16b5aefe66d1cde2d4c7fcdd5e9ec4f5f92955
- Size
  
  75KB
- MD5
  
  2a7f43a125dd19d2d722e2902486ff9b
- SHA1
  
  00befa4561515b0a01988a6859c66ca4dafa2d44
- SHA256
  
  fb76bd897f55da2ecc6d930add16b5aefe66d1cde2d4c7fcdd5e9ec4f5f92955
- SHA512
  
  c6864dd1e91bebeeb27bb273780bc357f18ca6979b3dcd7f49f92b98fd954ef7634bd6eebb6b9b06f16743b5fd10702c89df02490f6b9b252480cb6bba5fa7f8
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOfFe:GhfxHNIreQm+HiEFe
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2