3f6982905e1e50402dbb1a7542b50e01bf83bceb394739b67d72b1869bc54328 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f6982905e1e50402dbb1a7542b50e01bf83bceb394739b67d72b1869bc54328
Size

83KB
Sample

240528-eg6dhsfa63
MD5

257b8fff8e3a223b375842371cddf31d
SHA1

3a5c2d9e29b2c472a3f399930f9be46c6702f49f
SHA256

3f6982905e1e50402dbb1a7542b50e01bf83bceb394739b67d72b1869bc54328
SHA512

0fc793389398f13e159bc1b7aa194bae4d8c8e2d19b6182d6ab37885d47752418f78fc9f01b75d2af4f55fee6ebd22b7b58ad331d21d021738ddf3bb66c0f354
SSDEEP

768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWOGb:RshfSWHHNvoLqNwDDGw02eQmh0HjWOGb

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  3f6982905e1e50402dbb1a7542b50e01bf83bceb394739b67d72b1869bc54328
- Size
  
  83KB
- MD5
  
  257b8fff8e3a223b375842371cddf31d
- SHA1
  
  3a5c2d9e29b2c472a3f399930f9be46c6702f49f
- SHA256
  
  3f6982905e1e50402dbb1a7542b50e01bf83bceb394739b67d72b1869bc54328
- SHA512
  
  0fc793389398f13e159bc1b7aa194bae4d8c8e2d19b6182d6ab37885d47752418f78fc9f01b75d2af4f55fee6ebd22b7b58ad331d21d021738ddf3bb66c0f354
- SSDEEP
  
  768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWOGb:RshfSWHHNvoLqNwDDGw02eQmh0HjWOGb
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2