4b4aa59b9ec5d54886386134231124c7924c00ac6c635bbcfac46e2e58be7cff | Triage

Sharing

General

Target

4b4aa59b9ec5d54886386134231124c7924c00ac6c635bbcfac46e2e58be7cff
Size

27KB
Sample

240523-z1sa8agg37
MD5

72b88fb1722a88028393f1281a90a021
SHA1

776fe0024d240e62b35cf9ec680db1cd422c82a4
SHA256

4b4aa59b9ec5d54886386134231124c7924c00ac6c635bbcfac46e2e58be7cff
SHA512

8e5ee9a340729b1873b7dceff350808c0f0bd91c6b7560a80b4d5a1eb91368b5673e201bdca75de4735f153a55d8aed7d3ef0d7c5f09f61177e6d260782f92cb
SSDEEP

768:PVEHJqjHyGvwFylDpulVSQJrE/2QmlCYZUTOgM:PH2nylslwHCCLK

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  4b4aa59b9ec5d54886386134231124c7924c00ac6c635bbcfac46e2e58be7cff
- Size
  
  27KB
- MD5
  
  72b88fb1722a88028393f1281a90a021
- SHA1
  
  776fe0024d240e62b35cf9ec680db1cd422c82a4
- SHA256
  
  4b4aa59b9ec5d54886386134231124c7924c00ac6c635bbcfac46e2e58be7cff
- SHA512
  
  8e5ee9a340729b1873b7dceff350808c0f0bd91c6b7560a80b4d5a1eb91368b5673e201bdca75de4735f153a55d8aed7d3ef0d7c5f09f61177e6d260782f92cb
- SSDEEP
  
  768:PVEHJqjHyGvwFylDpulVSQJrE/2QmlCYZUTOgM:PH2nylslwHCCLK
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2