b1fd86330d7d2f4124405a4c0c76f9fd4527a96b77210fef919211eeba00a613 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1fd86330d7d2f4124405a4c0c76f9fd4527a96b77210fef919211eeba00a613
Size

75KB
Sample

240930-j2p99ayfqc
MD5

cfafe4588b13c3d269b4c4bf150b2246
SHA1

036297550fea10f03907b7cbfc1477400c5e47eb
SHA256

b1fd86330d7d2f4124405a4c0c76f9fd4527a96b77210fef919211eeba00a613
SHA512

60e50b8c35a631e871efc56fe2e5c5dbd02d5f4dd092e082287ba6eba8167caf2f1553f8563b79c89f575e3f7fea40153e24a730cda6ffecc395f06b9e114523
SSDEEP

768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWOv:RshfSWHHNvoLqNwDDGw02eQmh0HjWOv

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  b1fd86330d7d2f4124405a4c0c76f9fd4527a96b77210fef919211eeba00a613
- Size
  
  75KB
- MD5
  
  cfafe4588b13c3d269b4c4bf150b2246
- SHA1
  
  036297550fea10f03907b7cbfc1477400c5e47eb
- SHA256
  
  b1fd86330d7d2f4124405a4c0c76f9fd4527a96b77210fef919211eeba00a613
- SHA512
  
  60e50b8c35a631e871efc56fe2e5c5dbd02d5f4dd092e082287ba6eba8167caf2f1553f8563b79c89f575e3f7fea40153e24a730cda6ffecc395f06b9e114523
- SSDEEP
  
  768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWOv:RshfSWHHNvoLqNwDDGw02eQmh0HjWOv
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence