ba1ed00a17b3da7a8a67075e4c3535f13ca823dc79d0376bb190312fb8a24d63 | Triage

Sharing

General

Target

b205200816d6af827382ea8222fbfc70N.exe
Size

70KB
Sample

240721-mz62rsyemb
MD5

b205200816d6af827382ea8222fbfc70
SHA1

8df1d6f6be0157b68ec389478406df17bba5b388
SHA256

ba1ed00a17b3da7a8a67075e4c3535f13ca823dc79d0376bb190312fb8a24d63
SHA512

e450952fde067b41c2df95116170aa2622eaffa38fcbd5253fe215149037e44f7c7dbe23bd56af57dc4af30a3477723fd0038cb79654f226353c626e6d87a71f
SSDEEP

1536:RpJf7lEfNqUbyrrj57sXFjcXaIJjxK4jYUwc:TJlK6kFYxxK4jY2

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  b205200816d6af827382ea8222fbfc70N.exe
- Size
  
  70KB
- MD5
  
  b205200816d6af827382ea8222fbfc70
- SHA1
  
  8df1d6f6be0157b68ec389478406df17bba5b388
- SHA256
  
  ba1ed00a17b3da7a8a67075e4c3535f13ca823dc79d0376bb190312fb8a24d63
- SHA512
  
  e450952fde067b41c2df95116170aa2622eaffa38fcbd5253fe215149037e44f7c7dbe23bd56af57dc4af30a3477723fd0038cb79654f226353c626e6d87a71f
- SSDEEP
  
  1536:RpJf7lEfNqUbyrrj57sXFjcXaIJjxK4jYUwc:TJlK6kFYxxK4jY2
Score

8^/10

persistence
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Image File Execution Options Injection

Privilege Escalation

Event Triggered Execution

Change Default File Association

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2