c2ab66c4f807f9d9ef43868c53e6852c192a2ea14104858d6c18f5db9867214b | Triage

Sharing

General

Target

c2ab66c4f807f9d9ef43868c53e6852c192a2ea14104858d6c18f5db9867214b
Size

80KB
Sample

240610-3gt79avhqn
MD5

a87394c5aa253833edd0e17f3674f259
SHA1

0662df8c17742be6813f4df7b568ca7ed72186d4
SHA256

c2ab66c4f807f9d9ef43868c53e6852c192a2ea14104858d6c18f5db9867214b
SHA512

6767d7331cc8a95db8727fa71f494d959da9a6fd08c36d430b7ae5c7e55676a1f03ee2ec6f56dfca2204395c7729f6e6c78c7f94840a02eea84defbed24ac1ad
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOwFGOj:GhfxHNIreQm+HibFGOj

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  c2ab66c4f807f9d9ef43868c53e6852c192a2ea14104858d6c18f5db9867214b
- Size
  
  80KB
- MD5
  
  a87394c5aa253833edd0e17f3674f259
- SHA1
  
  0662df8c17742be6813f4df7b568ca7ed72186d4
- SHA256
  
  c2ab66c4f807f9d9ef43868c53e6852c192a2ea14104858d6c18f5db9867214b
- SHA512
  
  6767d7331cc8a95db8727fa71f494d959da9a6fd08c36d430b7ae5c7e55676a1f03ee2ec6f56dfca2204395c7729f6e6c78c7f94840a02eea84defbed24ac1ad
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOwFGOj:GhfxHNIreQm+HibFGOj
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2