9fe3ebc9e9d100a3700a6e66c0fd6367adb08bd0d93aad0c9151dcec974067d4 | Triage

Sharing

General

Target

9fe3ebc9e9d100a3700a6e66c0fd6367adb08bd0d93aad0c9151dcec974067d4
Size

108KB
Sample

220919-drt8kahhak
MD5

b70d924452693e80d3b46c8c48b725b3
SHA1

d39e984be2859fb39cc35ccf4b5538d6e6c4b081
SHA256

9fe3ebc9e9d100a3700a6e66c0fd6367adb08bd0d93aad0c9151dcec974067d4
SHA512

f301b6b9271d853a1acddf1de9f7850164afcca96a55697b44cfc6340cb9f3a247dbf15bd5c77f9a4e55d724827c9ad050d8fb1e141e66a9b904fe69b3cf4b0c
SSDEEP

768:pmrSjWEt5aAOvLg0uKMLGOlavHE8q8pi6ezRGMo4M+eCWJOrG578eE2aejRtuh2v:0rkhOvLmZnavhnNMXeCW0UE2ab

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  9fe3ebc9e9d100a3700a6e66c0fd6367adb08bd0d93aad0c9151dcec974067d4
- Size
  
  108KB
- MD5
  
  b70d924452693e80d3b46c8c48b725b3
- SHA1
  
  d39e984be2859fb39cc35ccf4b5538d6e6c4b081
- SHA256
  
  9fe3ebc9e9d100a3700a6e66c0fd6367adb08bd0d93aad0c9151dcec974067d4
- SHA512
  
  f301b6b9271d853a1acddf1de9f7850164afcca96a55697b44cfc6340cb9f3a247dbf15bd5c77f9a4e55d724827c9ad050d8fb1e141e66a9b904fe69b3cf4b0c
- SSDEEP
  
  768:pmrSjWEt5aAOvLg0uKMLGOlavHE8q8pi6ezRGMo4M+eCWJOrG578eE2aejRtuh2v:0rkhOvLmZnavhnNMXeCW0UE2ab
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies system executable filetype association
  persistence
- Modifies visibility of file extensions in Explorer
  evasion
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Change Default File Association

Hidden Files and Directories

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence