24fabf6941823abecdd4cb4ebd8cf50dd0c0f800b0c55cd410c0dd3ce1545ff1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24fabf6941823abecdd4cb4ebd8cf50dd0c0f800b0c55cd410c0dd3ce1545ff1
Size

77KB
Sample

240603-kdswxahb3s
MD5

ccc81c4d7c88aa9934c8771bdaf72163
SHA1

18e712bf1a29744dc552270a48d49c35542eda3a
SHA256

24fabf6941823abecdd4cb4ebd8cf50dd0c0f800b0c55cd410c0dd3ce1545ff1
SHA512

60367d9161277248d80b23c311c229a8665ff7631a6445be3726df77898236bd9a2e46dd990754ca5bbf12b6535ee83c8e4d0da2578ca92e5df41e3406c9bed1
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOckut:GhfxHNIreQm+HiPkut

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  24fabf6941823abecdd4cb4ebd8cf50dd0c0f800b0c55cd410c0dd3ce1545ff1
- Size
  
  77KB
- MD5
  
  ccc81c4d7c88aa9934c8771bdaf72163
- SHA1
  
  18e712bf1a29744dc552270a48d49c35542eda3a
- SHA256
  
  24fabf6941823abecdd4cb4ebd8cf50dd0c0f800b0c55cd410c0dd3ce1545ff1
- SHA512
  
  60367d9161277248d80b23c311c229a8665ff7631a6445be3726df77898236bd9a2e46dd990754ca5bbf12b6535ee83c8e4d0da2578ca92e5df41e3406c9bed1
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOckut:GhfxHNIreQm+HiPkut
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2