1723ff59b968969d2693e425108bdb1bfa04c88249fc5a30d58404a96dc75a82 | Triage

Sharing

General

Target

1723ff59b968969d2693e425108bdb1bfa04c88249fc5a30d58404a96dc75a82
Size

645KB
Sample

240925-xm664ssanp
MD5

8782f3cdb57dd3509a4794eba3493e73
SHA1

2715631be47484dcda80b5ea754d506d1a62e95a
SHA256

1723ff59b968969d2693e425108bdb1bfa04c88249fc5a30d58404a96dc75a82
SHA512

1190058137cedd26f3358109dcc4837f26c37139031f61c8e43ae4aaf26903f5ffc5549a470b7c64af19ea97a59cbdcf5c98a5318f99cc2ccd3ccebbecb6ed2a
SSDEEP

768:5BBdFYDgao5/AUrLEEzayTpBJfxBDlxcFNXK8D1Foj/:5pcC/eAayJ3Rx0g

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  1723ff59b968969d2693e425108bdb1bfa04c88249fc5a30d58404a96dc75a82
- Size
  
  645KB
- MD5
  
  8782f3cdb57dd3509a4794eba3493e73
- SHA1
  
  2715631be47484dcda80b5ea754d506d1a62e95a
- SHA256
  
  1723ff59b968969d2693e425108bdb1bfa04c88249fc5a30d58404a96dc75a82
- SHA512
  
  1190058137cedd26f3358109dcc4837f26c37139031f61c8e43ae4aaf26903f5ffc5549a470b7c64af19ea97a59cbdcf5c98a5318f99cc2ccd3ccebbecb6ed2a
- SSDEEP
  
  768:5BBdFYDgao5/AUrLEEzayTpBJfxBDlxcFNXK8D1Foj/:5pcC/eAayJ3Rx0g
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence