018a0fa3aba626f6da5957385b7bc57f5ae140006b7776dc0789082eb1618850 | Triage

Sharing

General

Target

018a0fa3aba626f6da5957385b7bc57f5ae140006b7776dc0789082eb1618850
Size

79KB
Sample

240530-ksderscc9t
MD5

17b1295880207e66513150de71ee8661
SHA1

b2fca196a36bbfaa882a5bd021fa0960f1ab6f1a
SHA256

018a0fa3aba626f6da5957385b7bc57f5ae140006b7776dc0789082eb1618850
SHA512

eb2d1c0a54fb1d6945fe4efd99cae371456a825f0561b27454ef90f000244d8a5766cfd1484636a49fbaa708d94d10f5b97487c6039c32ba0847af8ddaa0aaa1
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOE10I:GhfxHNIreQm+Hit10I

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  018a0fa3aba626f6da5957385b7bc57f5ae140006b7776dc0789082eb1618850
- Size
  
  79KB
- MD5
  
  17b1295880207e66513150de71ee8661
- SHA1
  
  b2fca196a36bbfaa882a5bd021fa0960f1ab6f1a
- SHA256
  
  018a0fa3aba626f6da5957385b7bc57f5ae140006b7776dc0789082eb1618850
- SHA512
  
  eb2d1c0a54fb1d6945fe4efd99cae371456a825f0561b27454ef90f000244d8a5766cfd1484636a49fbaa708d94d10f5b97487c6039c32ba0847af8ddaa0aaa1
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOE10I:GhfxHNIreQm+Hit10I
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2