8fa37f4c32d2ed037c20634391baeb3ad14e1d136bcd1429cf4744a705477766 | Triage

Sharing

General

Target

8fa37f4c32d2ed037c20634391baeb3ad14e1d136bcd1429cf4744a705477766
Size

82KB
Sample

240527-camxgscb2z
MD5

b1a5f482b9a36583d7d1250360db567a
SHA1

2af2a178bf1cc8fe91e8f33501f302c5797ae870
SHA256

8fa37f4c32d2ed037c20634391baeb3ad14e1d136bcd1429cf4744a705477766
SHA512

2e49e0e26ae779f3a020e84ec26223c6a89cb873101aeea3c39aba31ee4be5c984dc7bc796e153eb96fe0d8a17fe0ee19458cc64d666f9ef522e4adbddb8c324
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOwf441p+WL5VT7D:GhfxHNIreQm+HiDf441p+WL5VT7D

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  8fa37f4c32d2ed037c20634391baeb3ad14e1d136bcd1429cf4744a705477766
- Size
  
  82KB
- MD5
  
  b1a5f482b9a36583d7d1250360db567a
- SHA1
  
  2af2a178bf1cc8fe91e8f33501f302c5797ae870
- SHA256
  
  8fa37f4c32d2ed037c20634391baeb3ad14e1d136bcd1429cf4744a705477766
- SHA512
  
  2e49e0e26ae779f3a020e84ec26223c6a89cb873101aeea3c39aba31ee4be5c984dc7bc796e153eb96fe0d8a17fe0ee19458cc64d666f9ef522e4adbddb8c324
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOwf441p+WL5VT7D:GhfxHNIreQm+HiDf441p+WL5VT7D
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2