a3d1dddbfcce8aed41249cbe2965e36b84a2022a595dbb2051a22e8058d0ad99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3d1dddbfcce8aed41249cbe2965e36b84a2022a595dbb2051a22e8058d0ad99
Size

75KB
Sample

240611-cyw53a1gmm
MD5

9ff77694235c87e182d4081e427a8d4f
SHA1

f17daf701e301f4bb6c8d385e9ad735012a389bb
SHA256

a3d1dddbfcce8aed41249cbe2965e36b84a2022a595dbb2051a22e8058d0ad99
SHA512

ae8ce3f0048202b1bc39615e760ed35a4b1468b29c500554cd007ed14d30d916b92415c968c1a2649dcc5c5bb467d0ec7a1aa016559dfa195dbeebb1a53b0369
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOCQD:GhfxHNIreQm+HiVQD

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  a3d1dddbfcce8aed41249cbe2965e36b84a2022a595dbb2051a22e8058d0ad99
- Size
  
  75KB
- MD5
  
  9ff77694235c87e182d4081e427a8d4f
- SHA1
  
  f17daf701e301f4bb6c8d385e9ad735012a389bb
- SHA256
  
  a3d1dddbfcce8aed41249cbe2965e36b84a2022a595dbb2051a22e8058d0ad99
- SHA512
  
  ae8ce3f0048202b1bc39615e760ed35a4b1468b29c500554cd007ed14d30d916b92415c968c1a2649dcc5c5bb467d0ec7a1aa016559dfa195dbeebb1a53b0369
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOCQD:GhfxHNIreQm+HiVQD
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2