fd3d3de03e2c865159a703676ba147a3569d7df0027e6bf09558365886687ca5 | Triage

Sharing

General

Target

fd3d3de03e2c865159a703676ba147a3569d7df0027e6bf09558365886687ca5
Size

83KB
Sample

240522-y4y3hafa9x
MD5

50330cb8088bb4c16d21081d8c7d9560
SHA1

45c57b03b00128edeb01a6c3f63f2942b1e9f7cd
SHA256

fd3d3de03e2c865159a703676ba147a3569d7df0027e6bf09558365886687ca5
SHA512

565665e0958359a6fefb1c198e3b06b1b24326b14d2a9ee5cffb5cde218a9b348d31ba6b5e8d6e1985e73ba4ee860d27bbfb575bad764d6a8dd3f50a0487aee1
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWO6TI:GhfxHNIreQm+HiXTI

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  fd3d3de03e2c865159a703676ba147a3569d7df0027e6bf09558365886687ca5
- Size
  
  83KB
- MD5
  
  50330cb8088bb4c16d21081d8c7d9560
- SHA1
  
  45c57b03b00128edeb01a6c3f63f2942b1e9f7cd
- SHA256
  
  fd3d3de03e2c865159a703676ba147a3569d7df0027e6bf09558365886687ca5
- SHA512
  
  565665e0958359a6fefb1c198e3b06b1b24326b14d2a9ee5cffb5cde218a9b348d31ba6b5e8d6e1985e73ba4ee860d27bbfb575bad764d6a8dd3f50a0487aee1
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWO6TI:GhfxHNIreQm+HiXTI
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2