23e66834cff68bcca93760c1bc526e66023f3afc239731dab2fcd1d25cc389c0 | Triage

Sharing

General

Target

23e66834cff68bcca93760c1bc526e66023f3afc239731dab2fcd1d25cc389c0
Size

78KB
Sample

240611-w7bp9sxamp
MD5

f384488664e2c419435b6acf945234c4
SHA1

6d03e384034aa60a773e0b4f8f15b438a71cbdc1
SHA256

23e66834cff68bcca93760c1bc526e66023f3afc239731dab2fcd1d25cc389c0
SHA512

e6ee3f1ee6f804c6e37a97baf7cf2677fbfb878edca828c6c629e10361d11f919fb1beac597c86f934f7ac31a6fc38fb054c3270eee33f121f473245ddb28918
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOZsNcp:GhfxHNIreQm+Hi4sNcp

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  23e66834cff68bcca93760c1bc526e66023f3afc239731dab2fcd1d25cc389c0
- Size
  
  78KB
- MD5
  
  f384488664e2c419435b6acf945234c4
- SHA1
  
  6d03e384034aa60a773e0b4f8f15b438a71cbdc1
- SHA256
  
  23e66834cff68bcca93760c1bc526e66023f3afc239731dab2fcd1d25cc389c0
- SHA512
  
  e6ee3f1ee6f804c6e37a97baf7cf2677fbfb878edca828c6c629e10361d11f919fb1beac597c86f934f7ac31a6fc38fb054c3270eee33f121f473245ddb28918
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOZsNcp:GhfxHNIreQm+Hi4sNcp
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2