8d590a8c67da315576a6c77199c94cc9d06bebd2961fd9b3e5e23284e938a224 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d590a8c67da315576a6c77199c94cc9d06bebd2961fd9b3e5e23284e938a224
Size

82KB
Sample

240607-cytpyahc65
MD5

2822ca25de5be7d45043cab032f6c2fe
SHA1

0687e45116b93e948d3f3172eff11f140d3876e5
SHA256

8d590a8c67da315576a6c77199c94cc9d06bebd2961fd9b3e5e23284e938a224
SHA512

7c439fad511c1ce37c40020bfa5e12a64df0a530cea370fec7575509b26c2512a296f80dada847825d915da2dafe49e70babf3318a62b73112601b909a3444f5
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOi5X:GhfxHNIreQm+HiP5X

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  8d590a8c67da315576a6c77199c94cc9d06bebd2961fd9b3e5e23284e938a224
- Size
  
  82KB
- MD5
  
  2822ca25de5be7d45043cab032f6c2fe
- SHA1
  
  0687e45116b93e948d3f3172eff11f140d3876e5
- SHA256
  
  8d590a8c67da315576a6c77199c94cc9d06bebd2961fd9b3e5e23284e938a224
- SHA512
  
  7c439fad511c1ce37c40020bfa5e12a64df0a530cea370fec7575509b26c2512a296f80dada847825d915da2dafe49e70babf3318a62b73112601b909a3444f5
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOi5X:GhfxHNIreQm+HiP5X
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2