72b90d88372909913e0cbf91150b68d75eb0df08f098318bf07f85dc7d9e1911 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72b90d88372909913e0cbf91150b68d75eb0df08f098318bf07f85dc7d9e1911
Size

82KB
Sample

240812-hnh4cazcrl
MD5

81524803b7c263ad8172539741ccb851
SHA1

cf10ec43c31f63a10754888d13facc2267242fce
SHA256

72b90d88372909913e0cbf91150b68d75eb0df08f098318bf07f85dc7d9e1911
SHA512

80fc81f32693ecd0522e20023b520bdf084897075a74a2cff28ad61427e43c912f013860321dc9ee0335b35b7b72e659f6b61a11001b9d312304bda3aa9e1756
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOrn4eaTmU82MoERGzG6:GhfxHNIreQm+Hiqn4eaTmU82MoERGzG6

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  72b90d88372909913e0cbf91150b68d75eb0df08f098318bf07f85dc7d9e1911
- Size
  
  82KB
- MD5
  
  81524803b7c263ad8172539741ccb851
- SHA1
  
  cf10ec43c31f63a10754888d13facc2267242fce
- SHA256
  
  72b90d88372909913e0cbf91150b68d75eb0df08f098318bf07f85dc7d9e1911
- SHA512
  
  80fc81f32693ecd0522e20023b520bdf084897075a74a2cff28ad61427e43c912f013860321dc9ee0335b35b7b72e659f6b61a11001b9d312304bda3aa9e1756
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOrn4eaTmU82MoERGzG6:GhfxHNIreQm+Hiqn4eaTmU82MoERGzG6
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence