20bb6d1a150535dcf2938504e30e1b6483aeb42b22487bcf559a86927747b48b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01335eb37a44996a1bf3ca94960f9d70N.exe
Size

45KB
Sample

240802-zybwfszfql
MD5

01335eb37a44996a1bf3ca94960f9d70
SHA1

5d33acb992b67b3cd7f1bafafd74b86b9b5c5707
SHA256

20bb6d1a150535dcf2938504e30e1b6483aeb42b22487bcf559a86927747b48b
SHA512

fce0792e6ad668b1da7efcc49365b15498de59e19fa0d485769da5b424a1f07cb87827220fb7edfc6b2b8873dd23e09b081f5dc3225be7e41f205185a1b3f14e
SSDEEP

768:8V5hy+7c6OXdfwEQ90NoZCi5TXbRzjEDta8jFqjsZvI2YxrQiP+ZRDd+RYTl/iU0:8h7xsCKosi5pzjIcdRiTpqMGxs3E

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  01335eb37a44996a1bf3ca94960f9d70N.exe
- Size
  
  45KB
- MD5
  
  01335eb37a44996a1bf3ca94960f9d70
- SHA1
  
  5d33acb992b67b3cd7f1bafafd74b86b9b5c5707
- SHA256
  
  20bb6d1a150535dcf2938504e30e1b6483aeb42b22487bcf559a86927747b48b
- SHA512
  
  fce0792e6ad668b1da7efcc49365b15498de59e19fa0d485769da5b424a1f07cb87827220fb7edfc6b2b8873dd23e09b081f5dc3225be7e41f205185a1b3f14e
- SSDEEP
  
  768:8V5hy+7c6OXdfwEQ90NoZCi5TXbRzjEDta8jFqjsZvI2YxrQiP+ZRDd+RYTl/iU0:8h7xsCKosi5pzjIcdRiTpqMGxs3E
Score

8^/10

discovery persistence
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Image File Execution Options Injection

Privilege Escalation

Event Triggered Execution

Change Default File Association

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence