1a011f0a4d8aa5ad5c3b7c09305db93c6f5d382fe3c80bcce8d5ca92ee87c54e | Triage

Sharing

General

Target

1a011f0a4d8aa5ad5c3b7c09305db93c6f5d382fe3c80bcce8d5ca92ee87c54eN
Size

809KB
Sample

240927-ktc6dsxdmg
MD5

932367707a58f2d485b059753c450330
SHA1

1c2c11879909ff7402cfd7c00392ff308fc7e7d9
SHA256

1a011f0a4d8aa5ad5c3b7c09305db93c6f5d382fe3c80bcce8d5ca92ee87c54e
SHA512

3f586a5ac3fa1708bc54fa2bc568afc8f06516bc8f8a3b79af246ce04f1639e0bb21e8e1f931a4b341e071c32009f5db8423445e4cb81f4868951577716972b0
SSDEEP

768:5BBdFYDgao5/AUrLEEzayTpBJfxBDlxcFNXK8D1Foj/:5pcC/eAayJ3Rx0g

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  1a011f0a4d8aa5ad5c3b7c09305db93c6f5d382fe3c80bcce8d5ca92ee87c54eN
- Size
  
  809KB
- MD5
  
  932367707a58f2d485b059753c450330
- SHA1
  
  1c2c11879909ff7402cfd7c00392ff308fc7e7d9
- SHA256
  
  1a011f0a4d8aa5ad5c3b7c09305db93c6f5d382fe3c80bcce8d5ca92ee87c54e
- SHA512
  
  3f586a5ac3fa1708bc54fa2bc568afc8f06516bc8f8a3b79af246ce04f1639e0bb21e8e1f931a4b341e071c32009f5db8423445e4cb81f4868951577716972b0
- SSDEEP
  
  768:5BBdFYDgao5/AUrLEEzayTpBJfxBDlxcFNXK8D1Foj/:5pcC/eAayJ3Rx0g
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence