c9c0437a95c733d790a7b5e2b21065337ff4c840bfeaafe372c0aefec3ee852d | Triage

Sharing

General

Target

403e44e8e3b64ccc3a4ffdbccc4aa054.exe
Size

76KB
Sample

220408-ltcejaggdr
MD5

403e44e8e3b64ccc3a4ffdbccc4aa054
SHA1

ac4e9497417c4b8fe3d8b84a9545f348c710ac11
SHA256

c9c0437a95c733d790a7b5e2b21065337ff4c840bfeaafe372c0aefec3ee852d
SHA512

cd406c8e8796df749fb21281b1d069fc7102a283b3edb498989246da6d5f5087bbd8e5f1ba5b6907e8c0c0ef1448d6ae6636ccab87e7bf81d8e96926c56ec182

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  403e44e8e3b64ccc3a4ffdbccc4aa054.exe
- Size
  
  76KB
- MD5
  
  403e44e8e3b64ccc3a4ffdbccc4aa054
- SHA1
  
  ac4e9497417c4b8fe3d8b84a9545f348c710ac11
- SHA256
  
  c9c0437a95c733d790a7b5e2b21065337ff4c840bfeaafe372c0aefec3ee852d
- SHA512
  
  cd406c8e8796df749fb21281b1d069fc7102a283b3edb498989246da6d5f5087bbd8e5f1ba5b6907e8c0c0ef1448d6ae6636ccab87e7bf81d8e96926c56ec182
Score

8^/10

evasion persistence
- Executes dropped EXE
- Modifies Windows Firewall
  evasion
- Drops startup file
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2