a7fafad0dc16fd5696d09a5cbfb99e6038a0269ab13aba97f9253ba64f5c9153 | Triage

Sharing

General

Target

a7fafad0dc16fd5696d09a5cbfb99e6038a0269ab13aba97f9253ba64f5c9153
Size

78KB
Sample

240905-tn54navfld
MD5

ed7bf79cb720cbe7b24af59bf1022a6b
SHA1

9db9274a2cb439fbfd6b61fc61695015c5097d2c
SHA256

a7fafad0dc16fd5696d09a5cbfb99e6038a0269ab13aba97f9253ba64f5c9153
SHA512

b82cc8bfe29d51e9016e85d5265b6fcf6a5fc3cc1ea9dfa0d60776dc109f110371838998ffcfb99df2c5c8844bfafd2aaf25475858c8f680422697b83253a121
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWO5/s:GhfxHNIreQm+Him/s

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  a7fafad0dc16fd5696d09a5cbfb99e6038a0269ab13aba97f9253ba64f5c9153
- Size
  
  78KB
- MD5
  
  ed7bf79cb720cbe7b24af59bf1022a6b
- SHA1
  
  9db9274a2cb439fbfd6b61fc61695015c5097d2c
- SHA256
  
  a7fafad0dc16fd5696d09a5cbfb99e6038a0269ab13aba97f9253ba64f5c9153
- SHA512
  
  b82cc8bfe29d51e9016e85d5265b6fcf6a5fc3cc1ea9dfa0d60776dc109f110371838998ffcfb99df2c5c8844bfafd2aaf25475858c8f680422697b83253a121
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWO5/s:GhfxHNIreQm+Him/s
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence