e359cc88ca8170fcf291469e0d5d1db297a377c210459b91f422ef0611ddb508 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e359cc88ca8170fcf291469e0d5d1db297a377c210459b91f422ef0611ddb508
Size

76KB
Sample

240612-js6kwavflr
MD5

c2f3314a25162ba377174df328c0f41a
SHA1

abb43afd281a99201bfb44200688c9ba8e44fd4e
SHA256

e359cc88ca8170fcf291469e0d5d1db297a377c210459b91f422ef0611ddb508
SHA512

231bbbf984b8ebbd7375f93170d829f78a14ad083d932798be668d2d4ef5bb7eb421e43cd9673e94a418031a6c6a86fb99a207e3e6885833d1dc086b857b3d9e
SSDEEP

768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWOb5:RshfSWHHNvoLqNwDDGw02eQmh0HjWOb5

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  e359cc88ca8170fcf291469e0d5d1db297a377c210459b91f422ef0611ddb508
- Size
  
  76KB
- MD5
  
  c2f3314a25162ba377174df328c0f41a
- SHA1
  
  abb43afd281a99201bfb44200688c9ba8e44fd4e
- SHA256
  
  e359cc88ca8170fcf291469e0d5d1db297a377c210459b91f422ef0611ddb508
- SHA512
  
  231bbbf984b8ebbd7375f93170d829f78a14ad083d932798be668d2d4ef5bb7eb421e43cd9673e94a418031a6c6a86fb99a207e3e6885833d1dc086b857b3d9e
- SSDEEP
  
  768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWOb5:RshfSWHHNvoLqNwDDGw02eQmh0HjWOb5
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2