9f2c5c638e5aad9e564300dd4663c54e159c127398f03f514faa9261e0a3e6e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f2c5c638e5aad9e564300dd4663c54e159c127398f03f514faa9261e0a3e6e0
Size

76KB
Sample

240603-3k93waea93
MD5

3188c9a6f05e51ee79cdae8c986975d2
SHA1

d5d6759ab364ef2f914bd70f1f474c4dd92c103c
SHA256

9f2c5c638e5aad9e564300dd4663c54e159c127398f03f514faa9261e0a3e6e0
SHA512

182898290e3062d1f774189bbc1c186bcef26d79a47cb2ee2ff56680a0cdee5c0c8ceffcfd7456295e5bdf7ebab3de61cdfc9b92850fbebd402aa77a83b863e6
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOGhYPQ:GhfxHNIreQm+HiFmPQ

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  9f2c5c638e5aad9e564300dd4663c54e159c127398f03f514faa9261e0a3e6e0
- Size
  
  76KB
- MD5
  
  3188c9a6f05e51ee79cdae8c986975d2
- SHA1
  
  d5d6759ab364ef2f914bd70f1f474c4dd92c103c
- SHA256
  
  9f2c5c638e5aad9e564300dd4663c54e159c127398f03f514faa9261e0a3e6e0
- SHA512
  
  182898290e3062d1f774189bbc1c186bcef26d79a47cb2ee2ff56680a0cdee5c0c8ceffcfd7456295e5bdf7ebab3de61cdfc9b92850fbebd402aa77a83b863e6
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOGhYPQ:GhfxHNIreQm+HiFmPQ
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2