dcf6af128e27aecfa4b1ffba833eb001efbf03bc3197bbfd1922c18f77db73e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcf6af128e27aecfa4b1ffba833eb001efbf03bc3197bbfd1922c18f77db73e0
Size

74KB
Sample

240603-kdsadaad56
MD5

ac95056dcf2facad66d8369fb05b6728
SHA1

d3c428518cd0a238ed9ce0e1ccb30ba78cb656ae
SHA256

dcf6af128e27aecfa4b1ffba833eb001efbf03bc3197bbfd1922c18f77db73e0
SHA512

ddabac509934d144bfb6181f08b31aeb2c617e0971148f08044c6c12dedf418a01ba4481e5678a8cf4565cee5b7d4d76d74e7f973fa9de007c27e8e3f1d2214b
SSDEEP

768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWO:RshfSWHHNvoLqNwDDGw02eQmh0HjWO

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  dcf6af128e27aecfa4b1ffba833eb001efbf03bc3197bbfd1922c18f77db73e0
- Size
  
  74KB
- MD5
  
  ac95056dcf2facad66d8369fb05b6728
- SHA1
  
  d3c428518cd0a238ed9ce0e1ccb30ba78cb656ae
- SHA256
  
  dcf6af128e27aecfa4b1ffba833eb001efbf03bc3197bbfd1922c18f77db73e0
- SHA512
  
  ddabac509934d144bfb6181f08b31aeb2c617e0971148f08044c6c12dedf418a01ba4481e5678a8cf4565cee5b7d4d76d74e7f973fa9de007c27e8e3f1d2214b
- SSDEEP
  
  768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWO:RshfSWHHNvoLqNwDDGw02eQmh0HjWO
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2