30087647aa1dd33fc6a94156f4ff982e063db2274503a5f7a6479624994cd88d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30087647aa1dd33fc6a94156f4ff982e063db2274503a5f7a6479624994cd88d
Size

76KB
Sample

240524-yc6m9sha95
MD5

5dc5e756497554737bfccf880499102a
SHA1

183ede230448bf93c98bc94fe61bb818c47ced55
SHA256

30087647aa1dd33fc6a94156f4ff982e063db2274503a5f7a6479624994cd88d
SHA512

13a95eb51666b0c3cf91c41d903aceb59861f6f65e94b7c982a6b5fe2c0e375c353063986abb21ab675e8e294c4c4958faa563449db4d2e47a2063a8785e568e
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOl2:GhfxHNIreQm+Hi62

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  30087647aa1dd33fc6a94156f4ff982e063db2274503a5f7a6479624994cd88d
- Size
  
  76KB
- MD5
  
  5dc5e756497554737bfccf880499102a
- SHA1
  
  183ede230448bf93c98bc94fe61bb818c47ced55
- SHA256
  
  30087647aa1dd33fc6a94156f4ff982e063db2274503a5f7a6479624994cd88d
- SHA512
  
  13a95eb51666b0c3cf91c41d903aceb59861f6f65e94b7c982a6b5fe2c0e375c353063986abb21ab675e8e294c4c4958faa563449db4d2e47a2063a8785e568e
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOl2:GhfxHNIreQm+Hi62
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2