080160dd85cd01890dd29e96706a2f49ca3b357e8f7982979276bf49a3c93a45 | Triage

Sharing

General

Target

080160dd85cd01890dd29e96706a2f49ca3b357e8f7982979276bf49a3c93a45
Size

79KB
Sample

240524-emsplscd9w
MD5

6fd16bfbd0390ea031dd5ba8508efc14
SHA1

6e0d26250ba565e84a830f0e1042aad466864f16
SHA256

080160dd85cd01890dd29e96706a2f49ca3b357e8f7982979276bf49a3c93a45
SHA512

01b822aebfb2fe90a1e944df6c40cfdd75c1d252d92aa5bc3b62a08262446c4f6b1aace06232fdffdd850ba3292db88049e7cb2fd4ce6cb212e1be4968e2450d
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOZG7No:GhfxHNIreQm+HiqG7No

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  080160dd85cd01890dd29e96706a2f49ca3b357e8f7982979276bf49a3c93a45
- Size
  
  79KB
- MD5
  
  6fd16bfbd0390ea031dd5ba8508efc14
- SHA1
  
  6e0d26250ba565e84a830f0e1042aad466864f16
- SHA256
  
  080160dd85cd01890dd29e96706a2f49ca3b357e8f7982979276bf49a3c93a45
- SHA512
  
  01b822aebfb2fe90a1e944df6c40cfdd75c1d252d92aa5bc3b62a08262446c4f6b1aace06232fdffdd850ba3292db88049e7cb2fd4ce6cb212e1be4968e2450d
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOZG7No:GhfxHNIreQm+HiqG7No
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2