9e7b9cec2792e7e3efd7ae08328a64a79427d4be79210d1529fd146a2dc76f96 | Triage

Sharing

General

Target

9e7b9cec2792e7e3efd7ae08328a64a79427d4be79210d1529fd146a2dc76f96
Size

76KB
Sample

241031-j2tmnswkhn
MD5

74f4d3c1b88440eb332154535d6ddbd6
SHA1

5a840497bbf0809d158a9937f5de1c9bf8bca4b0
SHA256

9e7b9cec2792e7e3efd7ae08328a64a79427d4be79210d1529fd146a2dc76f96
SHA512

38d45ce90bfdd9c7bb86e4d5e89760a23b3a628c528855b7925b4fd3ff5adbc7c0220a9134d54dea37d1865e9d28c89a9ae68c3b33618a4e32dd4026083905e3
SSDEEP

768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWO04:RshfSWHHNvoLqNwDDGw02eQmh0HjWO04

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  9e7b9cec2792e7e3efd7ae08328a64a79427d4be79210d1529fd146a2dc76f96
- Size
  
  76KB
- MD5
  
  74f4d3c1b88440eb332154535d6ddbd6
- SHA1
  
  5a840497bbf0809d158a9937f5de1c9bf8bca4b0
- SHA256
  
  9e7b9cec2792e7e3efd7ae08328a64a79427d4be79210d1529fd146a2dc76f96
- SHA512
  
  38d45ce90bfdd9c7bb86e4d5e89760a23b3a628c528855b7925b4fd3ff5adbc7c0220a9134d54dea37d1865e9d28c89a9ae68c3b33618a4e32dd4026083905e3
- SSDEEP
  
  768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWO04:RshfSWHHNvoLqNwDDGw02eQmh0HjWO04
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence