3e4dd6a9c96d980f6e6cc7f3ab85296cf7bd5f5eab4a84dac2e779f5af6cd8b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e4dd6a9c96d980f6e6cc7f3ab85296cf7bd5f5eab4a84dac2e779f5af6cd8b5
Size

79KB
Sample

240712-r4845syamn
MD5

d502a1c94294114741a358c92976d736
SHA1

0dd191ddb3b84d0b8be57dbc60b2cab26ce3a2ba
SHA256

3e4dd6a9c96d980f6e6cc7f3ab85296cf7bd5f5eab4a84dac2e779f5af6cd8b5
SHA512

9947dadbd9008e8eaff455455c61a1046cd0e74778f8d39fc4b374227eb4a78ac43ad5c5102390f3ed713c0fa4cb6adfbd8092bfa2c86a8f80e91eb188d725e6
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOQVdGU/:GhfxHNIreQm+HiDVdGU/

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  3e4dd6a9c96d980f6e6cc7f3ab85296cf7bd5f5eab4a84dac2e779f5af6cd8b5
- Size
  
  79KB
- MD5
  
  d502a1c94294114741a358c92976d736
- SHA1
  
  0dd191ddb3b84d0b8be57dbc60b2cab26ce3a2ba
- SHA256
  
  3e4dd6a9c96d980f6e6cc7f3ab85296cf7bd5f5eab4a84dac2e779f5af6cd8b5
- SHA512
  
  9947dadbd9008e8eaff455455c61a1046cd0e74778f8d39fc4b374227eb4a78ac43ad5c5102390f3ed713c0fa4cb6adfbd8092bfa2c86a8f80e91eb188d725e6
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOQVdGU/:GhfxHNIreQm+HiDVdGU/
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2