66fe68d1ae0356db7361ff0ea3425e0d0b17a7441282d5939413ba92efbf1102 | Triage

Sharing

General

Target

66fe68d1ae0356db7361ff0ea3425e0d0b17a7441282d5939413ba92efbf1102
Size

74KB
Sample

240819-jef33a1frf
MD5

cbf11ac03e3341e02c257fe4bb4a680e
SHA1

3a574e622d24cc075f0691d52b7a8bca7030dfe7
SHA256

66fe68d1ae0356db7361ff0ea3425e0d0b17a7441282d5939413ba92efbf1102
SHA512

44aed81221c40c02695e22d13d12836187ab14098b890f59e402001d16cc37711ce4eb511e237e9312f8c38522c8a46c08e69a336dd62063499be2b93e7ce93c
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWO1WF:GhfxHNIreQm+HieWF

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  66fe68d1ae0356db7361ff0ea3425e0d0b17a7441282d5939413ba92efbf1102
- Size
  
  74KB
- MD5
  
  cbf11ac03e3341e02c257fe4bb4a680e
- SHA1
  
  3a574e622d24cc075f0691d52b7a8bca7030dfe7
- SHA256
  
  66fe68d1ae0356db7361ff0ea3425e0d0b17a7441282d5939413ba92efbf1102
- SHA512
  
  44aed81221c40c02695e22d13d12836187ab14098b890f59e402001d16cc37711ce4eb511e237e9312f8c38522c8a46c08e69a336dd62063499be2b93e7ce93c
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWO1WF:GhfxHNIreQm+HieWF
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence