990e7dbfce01e5bdf5c280832912c7ddea5e01a68e5953922306a175a460aedb | Triage

Sharing

General

Target

990e7dbfce01e5bdf5c280832912c7ddea5e01a68e5953922306a175a460aedb
Size

592KB
Sample

221002-k459xsgga2
MD5

65e5e32cd3933c14ea311b0f007d5c80
SHA1

a4037a320b3a9e33f7acc0c21c5c3323facab76d
SHA256

990e7dbfce01e5bdf5c280832912c7ddea5e01a68e5953922306a175a460aedb
SHA512

fe360518762adcab227a246ce9b9a6534267888114cde4d8a979eeb3a81e65693849d9b1c0c1f2d106f0bd0a23f8ba8a07cd5a56c2cea667c641aacec597bf45
SSDEEP

6144:m1krSUy402YNnUTkYPFtOvbcHPNCLC8D2U2al9RLnvqwEi+LC2y2dXEkauGiVM7U:mfj4YNTAS5rTDRLvqBbLC2yhiOg

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  990e7dbfce01e5bdf5c280832912c7ddea5e01a68e5953922306a175a460aedb
- Size
  
  592KB
- MD5
  
  65e5e32cd3933c14ea311b0f007d5c80
- SHA1
  
  a4037a320b3a9e33f7acc0c21c5c3323facab76d
- SHA256
  
  990e7dbfce01e5bdf5c280832912c7ddea5e01a68e5953922306a175a460aedb
- SHA512
  
  fe360518762adcab227a246ce9b9a6534267888114cde4d8a979eeb3a81e65693849d9b1c0c1f2d106f0bd0a23f8ba8a07cd5a56c2cea667c641aacec597bf45
- SSDEEP
  
  6144:m1krSUy402YNnUTkYPFtOvbcHPNCLC8D2U2al9RLnvqwEi+LC2y2dXEkauGiVM7U:mfj4YNTAS5rTDRLvqBbLC2yhiOg
Score

8^/10

evasion persistence
- Modifies Windows Firewall
  evasion
- Drops startup file
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

evasionpersistence