09f439a6bb38ffe09c2428df06fbf0a4ca2aa138e922653ccbed8ccbd1512386 | Triage

Sharing

General

Target

09f439a6bb38ffe09c2428df06fbf0a4ca2aa138e922653ccbed8ccbd1512386
Size

83KB
Sample

240609-xhntzaed92
MD5

9632e7941853f0533aa1de7522fbc5f7
SHA1

6ce7284b526b08c7b5f196bb0c5a4ec7530a20d9
SHA256

09f439a6bb38ffe09c2428df06fbf0a4ca2aa138e922653ccbed8ccbd1512386
SHA512

e4f11963c2bb4175c99fc352edeadea1ff23c0eca4588bd236ff6fd2d244bda3ede66af92eacfb1d364925134ca4fb6d305fcc259095068f3aef2e96982f3cab
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOoMl:GhfxHNIreQm+HiTMl

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  09f439a6bb38ffe09c2428df06fbf0a4ca2aa138e922653ccbed8ccbd1512386
- Size
  
  83KB
- MD5
  
  9632e7941853f0533aa1de7522fbc5f7
- SHA1
  
  6ce7284b526b08c7b5f196bb0c5a4ec7530a20d9
- SHA256
  
  09f439a6bb38ffe09c2428df06fbf0a4ca2aa138e922653ccbed8ccbd1512386
- SHA512
  
  e4f11963c2bb4175c99fc352edeadea1ff23c0eca4588bd236ff6fd2d244bda3ede66af92eacfb1d364925134ca4fb6d305fcc259095068f3aef2e96982f3cab
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOoMl:GhfxHNIreQm+HiTMl
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2