0d266c6ce3152a93b73a86f870c90ea49c0c03e88e69754761fb344877827cc6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d266c6ce3152a93b73a86f870c90ea49c0c03e88e69754761fb344877827cc6
Size

80KB
Sample

240915-hdvdmazgmg
MD5

6287c72b0581fac9be1252291a9cd615
SHA1

e1db25e6a11226e252190f6a6b134929d577fdb3
SHA256

0d266c6ce3152a93b73a86f870c90ea49c0c03e88e69754761fb344877827cc6
SHA512

158e991e645d21eb5983b1af015bd3115cff66fab677376c4390e0c17bcacbf4c98701b6e72e5ad0f59d37f94062d1174c58b31d456b9e6c3ec8c1984348f794
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOP3V5:GhfxHNIreQm+Hio3V5

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  0d266c6ce3152a93b73a86f870c90ea49c0c03e88e69754761fb344877827cc6
- Size
  
  80KB
- MD5
  
  6287c72b0581fac9be1252291a9cd615
- SHA1
  
  e1db25e6a11226e252190f6a6b134929d577fdb3
- SHA256
  
  0d266c6ce3152a93b73a86f870c90ea49c0c03e88e69754761fb344877827cc6
- SHA512
  
  158e991e645d21eb5983b1af015bd3115cff66fab677376c4390e0c17bcacbf4c98701b6e72e5ad0f59d37f94062d1174c58b31d456b9e6c3ec8c1984348f794
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOP3V5:GhfxHNIreQm+Hio3V5
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence