b1251e425a94b6e66af3d28d870a3d2fc04100a771d7be85c2c2e17fdf73164e | Triage

Sharing

General

Target

b1251e425a94b6e66af3d28d870a3d2fc04100a771d7be85c2c2e17fdf73164e
Size

73KB
Sample

241005-jxd2esycpc
MD5

bbdd6da61bc7b21b9c70667747aec648
SHA1

9d5140a2921c5c66bc1d07c151fffbd5f4c03321
SHA256

b1251e425a94b6e66af3d28d870a3d2fc04100a771d7be85c2c2e17fdf73164e
SHA512

de3422044824c222112f17d1d310d1b7272fa5d06030fe19411b60bf5b324fc657256bc532c32fda92c93cedf5c96326b27183025714643cc46a7878fec680a9
SSDEEP

768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWO:RshfSWHHNvoLqNwDDGw02eQmh0HjWO

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  b1251e425a94b6e66af3d28d870a3d2fc04100a771d7be85c2c2e17fdf73164e
- Size
  
  73KB
- MD5
  
  bbdd6da61bc7b21b9c70667747aec648
- SHA1
  
  9d5140a2921c5c66bc1d07c151fffbd5f4c03321
- SHA256
  
  b1251e425a94b6e66af3d28d870a3d2fc04100a771d7be85c2c2e17fdf73164e
- SHA512
  
  de3422044824c222112f17d1d310d1b7272fa5d06030fe19411b60bf5b324fc657256bc532c32fda92c93cedf5c96326b27183025714643cc46a7878fec680a9
- SSDEEP
  
  768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWO:RshfSWHHNvoLqNwDDGw02eQmh0HjWO
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence