fe0822ab5b107aa13cc533a12f1e91d26b3d4fd7e7a643c704634595db4b522c | Triage

Sharing

General

Target

fe0822ab5b107aa13cc533a12f1e91d26b3d4fd7e7a643c704634595db4b522c
Size

81KB
Sample

240803-ded1ta1brr
MD5

8e9a2ac4a591fe11a66a82e14283e3bb
SHA1

3d3b8d9e8a7c49580233c1b17cc340a57d541fdb
SHA256

fe0822ab5b107aa13cc533a12f1e91d26b3d4fd7e7a643c704634595db4b522c
SHA512

2babaa2405e8200198d4405618e6c6d5473ea5f239a51f6fcb0702347152040355d40a725afa0de9f3986f5acf5723ca6f8c4f2273af03b9845f85a69baa82f9
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOh74WQq1:GhfxHNIreQm+Hiy74WQq1

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  fe0822ab5b107aa13cc533a12f1e91d26b3d4fd7e7a643c704634595db4b522c
- Size
  
  81KB
- MD5
  
  8e9a2ac4a591fe11a66a82e14283e3bb
- SHA1
  
  3d3b8d9e8a7c49580233c1b17cc340a57d541fdb
- SHA256
  
  fe0822ab5b107aa13cc533a12f1e91d26b3d4fd7e7a643c704634595db4b522c
- SHA512
  
  2babaa2405e8200198d4405618e6c6d5473ea5f239a51f6fcb0702347152040355d40a725afa0de9f3986f5acf5723ca6f8c4f2273af03b9845f85a69baa82f9
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOh74WQq1:GhfxHNIreQm+Hiy74WQq1
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence