b3da6af2015d67a5cf2ec2e120ac78d83d318ad2d878654d858dd58904bf4487 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cb6825d0930f65272d6c39c4b7045a0N.exe
Size

44KB
Sample

240709-bw9sps1hrb
MD5

1cb6825d0930f65272d6c39c4b7045a0
SHA1

b1fa7f4200f24779c8afdf0e44e2786a96aef24b
SHA256

b3da6af2015d67a5cf2ec2e120ac78d83d318ad2d878654d858dd58904bf4487
SHA512

91ced9da6877273b13eb54f8218144d5631f7b9ce79d9e93fc7d527ea2d6b891169ba28dbd96bc4947c5b88dc3ab83ff92ea8bf386c5e82639f4d52c3cf70b06
SSDEEP

768:8V5hy+7c6OXdfwEQ90NoZCi5TXbRzjEDta8jFqjsZvI2YxrQiP+ZRDd+RYTl/iUS:8h7xsCKosi5pzjIcdRiTpqMGxs3i

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  1cb6825d0930f65272d6c39c4b7045a0N.exe
- Size
  
  44KB
- MD5
  
  1cb6825d0930f65272d6c39c4b7045a0
- SHA1
  
  b1fa7f4200f24779c8afdf0e44e2786a96aef24b
- SHA256
  
  b3da6af2015d67a5cf2ec2e120ac78d83d318ad2d878654d858dd58904bf4487
- SHA512
  
  91ced9da6877273b13eb54f8218144d5631f7b9ce79d9e93fc7d527ea2d6b891169ba28dbd96bc4947c5b88dc3ab83ff92ea8bf386c5e82639f4d52c3cf70b06
- SSDEEP
  
  768:8V5hy+7c6OXdfwEQ90NoZCi5TXbRzjEDta8jFqjsZvI2YxrQiP+ZRDd+RYTl/iUS:8h7xsCKosi5pzjIcdRiTpqMGxs3i
Score

8^/10

persistence
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Image File Execution Options Injection

Privilege Escalation

Event Triggered Execution

Change Default File Association

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2