6c9fe2be1d9372646052352fe2c881e02932e4b03adaebe403bbb778b084f523 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c9fe2be1d9372646052352fe2c881e02932e4b03adaebe403bbb778b084f523N
Size

31KB
Sample

240919-pkw95axhpe
MD5

f5e814d3139a641348fcbc31d183ca20
SHA1

695aec28f755d76c29bb48e1b94f5909f5873fbc
SHA256

6c9fe2be1d9372646052352fe2c881e02932e4b03adaebe403bbb778b084f523
SHA512

9d84a9c3e991ea1813c0c39ddc7526afd9a30b25215abdf0a7ac4e94ab864ada5296b29cd281f44a8e9b8433cdc65a0c9c03dbd4977f0b5f052c56d455fe11a5
SSDEEP

768:4Q0FtbM5c3PXJiLAI1z1n48ViHYL+pLYLYLYLYLYL:wLkcqAG1n48Vsb

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  6c9fe2be1d9372646052352fe2c881e02932e4b03adaebe403bbb778b084f523N
- Size
  
  31KB
- MD5
  
  f5e814d3139a641348fcbc31d183ca20
- SHA1
  
  695aec28f755d76c29bb48e1b94f5909f5873fbc
- SHA256
  
  6c9fe2be1d9372646052352fe2c881e02932e4b03adaebe403bbb778b084f523
- SHA512
  
  9d84a9c3e991ea1813c0c39ddc7526afd9a30b25215abdf0a7ac4e94ab864ada5296b29cd281f44a8e9b8433cdc65a0c9c03dbd4977f0b5f052c56d455fe11a5
- SSDEEP
  
  768:4Q0FtbM5c3PXJiLAI1z1n48ViHYL+pLYLYLYLYLYL:wLkcqAG1n48Vsb
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence