fb2a529cdc5b906d5145b015e2d6e5fc1191b8da5a0a2f56786e6824ada19504 | Triage

Sharing

General

Target

fb2a529cdc5b906d5145b015e2d6e5fc1191b8da5a0a2f56786e6824ada19504
Size

82KB
Sample

240605-x7grysfd61
MD5

d1b3dcad86a122f2f0f72198bec7b8e6
SHA1

f6f4d5206d815abee8d95f75aff239465107bfa8
SHA256

fb2a529cdc5b906d5145b015e2d6e5fc1191b8da5a0a2f56786e6824ada19504
SHA512

31909d3962390688220434f72d7794826fbd3d26602630957cb9a05adc107e3f5b9fdca1bd51e79f0861d01644dfe2578bf2d91b75cdb8d5ade0082bab0fa180
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOXeMwY:GhfxHNIreQm+HiueMwY

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  fb2a529cdc5b906d5145b015e2d6e5fc1191b8da5a0a2f56786e6824ada19504
- Size
  
  82KB
- MD5
  
  d1b3dcad86a122f2f0f72198bec7b8e6
- SHA1
  
  f6f4d5206d815abee8d95f75aff239465107bfa8
- SHA256
  
  fb2a529cdc5b906d5145b015e2d6e5fc1191b8da5a0a2f56786e6824ada19504
- SHA512
  
  31909d3962390688220434f72d7794826fbd3d26602630957cb9a05adc107e3f5b9fdca1bd51e79f0861d01644dfe2578bf2d91b75cdb8d5ade0082bab0fa180
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOXeMwY:GhfxHNIreQm+HiueMwY
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2