41eb6d104bd68dcc41ca3228552b13eb17f128861756ea17d37fa7308969fdc0 | Triage

Sharing

General

Target

41eb6d104bd68dcc41ca3228552b13eb17f128861756ea17d37fa7308969fdc0
Size

27KB
Sample

241012-zymb7awakn
MD5

679fd96cc47a79fd1b3a6198707dc60e
SHA1

3051bed0bca6ae80f1fbb01239b5721aba6275f8
SHA256

41eb6d104bd68dcc41ca3228552b13eb17f128861756ea17d37fa7308969fdc0
SHA512

58784522bc6e43335af2a6836dbe21130b49225f2e980871a5cbe983967016aa9baa8062b671eaf220b01fe09c84f88f052e357563237f17d1a1084ca19bfde0
SSDEEP

768:PVEHJqjHyGvwFylDpulVSQJrE/2QmlCYZUTZ5:PH2nylslwHCCLT

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  41eb6d104bd68dcc41ca3228552b13eb17f128861756ea17d37fa7308969fdc0
- Size
  
  27KB
- MD5
  
  679fd96cc47a79fd1b3a6198707dc60e
- SHA1
  
  3051bed0bca6ae80f1fbb01239b5721aba6275f8
- SHA256
  
  41eb6d104bd68dcc41ca3228552b13eb17f128861756ea17d37fa7308969fdc0
- SHA512
  
  58784522bc6e43335af2a6836dbe21130b49225f2e980871a5cbe983967016aa9baa8062b671eaf220b01fe09c84f88f052e357563237f17d1a1084ca19bfde0
- SSDEEP
  
  768:PVEHJqjHyGvwFylDpulVSQJrE/2QmlCYZUTZ5:PH2nylslwHCCLT
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence