f75a86e7845ccc38bd3bc6b3326e7308342ea37802aac970e637252ba38cf499 | Triage

Sharing

General

Target

5a5f661f57fa5ef4e21c7044952f46d0N.exe
Size

70KB
Sample

240722-er4yfawdre
MD5

5a5f661f57fa5ef4e21c7044952f46d0
SHA1

3f486c07f6af7bacb5b127cea4d9d23e793131c5
SHA256

f75a86e7845ccc38bd3bc6b3326e7308342ea37802aac970e637252ba38cf499
SHA512

0b6902056cbf9e7d4c94bfaa4b2eab75cb4a47aa88abb8afb1217ce08ccc9d0fac865c3d109cc11c5dc73b8f8e2a6a6e5ab65f2b208425b7af2352131a810b9f
SSDEEP

1536:RpJf7lEfNqUbyrrj57sXFjcXaIJjxK4jYUO:TJlK6kFYxxK4jYx

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  5a5f661f57fa5ef4e21c7044952f46d0N.exe
- Size
  
  70KB
- MD5
  
  5a5f661f57fa5ef4e21c7044952f46d0
- SHA1
  
  3f486c07f6af7bacb5b127cea4d9d23e793131c5
- SHA256
  
  f75a86e7845ccc38bd3bc6b3326e7308342ea37802aac970e637252ba38cf499
- SHA512
  
  0b6902056cbf9e7d4c94bfaa4b2eab75cb4a47aa88abb8afb1217ce08ccc9d0fac865c3d109cc11c5dc73b8f8e2a6a6e5ab65f2b208425b7af2352131a810b9f
- SSDEEP
  
  1536:RpJf7lEfNqUbyrrj57sXFjcXaIJjxK4jYUO:TJlK6kFYxxK4jYx
Score

8^/10

persistence
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Image File Execution Options Injection

Privilege Escalation

Event Triggered Execution

Change Default File Association

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2