c91be62d3b66f0329eb8c4cf0a3834f8d1bf43a89c926ce777d93d4dd0adeda1 | Triage

Sharing

General

Target

c91be62d3b66f0329eb8c4cf0a3834f8d1bf43a89c926ce777d93d4dd0adeda1
Size

78KB
Sample

240522-z872mshc5t
MD5

3442680129804748735cf7b582a0575c
SHA1

0b00abc15b68b42c421da3a4c8fdf86ed322f846
SHA256

c91be62d3b66f0329eb8c4cf0a3834f8d1bf43a89c926ce777d93d4dd0adeda1
SHA512

47592328e29f77841502c01c0c2dd5d4a79abc919f7227530778f07df712c060e703f6e1b6c13ae326d6b0a1ce630b1d59bb7e94c871cf0fd89820defe728785
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOVkdvz5S:GhfxHNIreQm+HiYkdvz5S

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  c91be62d3b66f0329eb8c4cf0a3834f8d1bf43a89c926ce777d93d4dd0adeda1
- Size
  
  78KB
- MD5
  
  3442680129804748735cf7b582a0575c
- SHA1
  
  0b00abc15b68b42c421da3a4c8fdf86ed322f846
- SHA256
  
  c91be62d3b66f0329eb8c4cf0a3834f8d1bf43a89c926ce777d93d4dd0adeda1
- SHA512
  
  47592328e29f77841502c01c0c2dd5d4a79abc919f7227530778f07df712c060e703f6e1b6c13ae326d6b0a1ce630b1d59bb7e94c871cf0fd89820defe728785
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOVkdvz5S:GhfxHNIreQm+HiYkdvz5S
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2