ef977fb5a2372e626de0472b6365f28bbc90f0da1766699f78a809f9729eee6d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef977fb5a2372e626de0472b6365f28bbc90f0da1766699f78a809f9729eee6d
Size

72KB
Sample

221020-ryxtxshfdl
MD5

527ecfc1a5f8f4956f0639d643c63421
SHA1

85f89c9b1e6ed846c596a2d9c3de61d8532c1d2e
SHA256

ef977fb5a2372e626de0472b6365f28bbc90f0da1766699f78a809f9729eee6d
SHA512

3c952aa694945c3c2251b3c8eb4642397179981469ef6b3a62bccdf9ae8bffd6ac155b020b5a26e92e5b9004694eefcaef66210531565748177644d4421a26a8
SSDEEP

384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2g:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrs

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  ef977fb5a2372e626de0472b6365f28bbc90f0da1766699f78a809f9729eee6d
- Size
  
  72KB
- MD5
  
  527ecfc1a5f8f4956f0639d643c63421
- SHA1
  
  85f89c9b1e6ed846c596a2d9c3de61d8532c1d2e
- SHA256
  
  ef977fb5a2372e626de0472b6365f28bbc90f0da1766699f78a809f9729eee6d
- SHA512
  
  3c952aa694945c3c2251b3c8eb4642397179981469ef6b3a62bccdf9ae8bffd6ac155b020b5a26e92e5b9004694eefcaef66210531565748177644d4421a26a8
- SSDEEP
  
  384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2g:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrs
Score

10^/10

evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2