4118fe5be1754c4468b73d4b15a99c203de8178e568a293b6f13889841859a54 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4118fe5be1754c4468b73d4b15a99c203de8178e568a293b6f13889841859a54
Size

292KB
Sample

221020-y6qh5sdbcq
MD5

905b59932b1a6462ae486f6f80b51ecf
SHA1

6cb6e4f2cd785308dd0eb423c94d16da56492cd4
SHA256

4118fe5be1754c4468b73d4b15a99c203de8178e568a293b6f13889841859a54
SHA512

2c3007dfa6d13c7b037d644b78387d06ce8c89d62eea7e91f454afb9639e4e5fd005c2d986efa8d78e25692ec013b444be495827669fd836fa5e611a1dc1a09c
SSDEEP

3072:UHJO+cNvqUYsEvS/xQOcifEW8MIYH15oS8eS3IikJ/wT2evLhIpS3O9zaJHe:wJAMsay7VQMIooZeD/fylI79aZe

Score

8^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  4118fe5be1754c4468b73d4b15a99c203de8178e568a293b6f13889841859a54
- Size
  
  292KB
- MD5
  
  905b59932b1a6462ae486f6f80b51ecf
- SHA1
  
  6cb6e4f2cd785308dd0eb423c94d16da56492cd4
- SHA256
  
  4118fe5be1754c4468b73d4b15a99c203de8178e568a293b6f13889841859a54
- SHA512
  
  2c3007dfa6d13c7b037d644b78387d06ce8c89d62eea7e91f454afb9639e4e5fd005c2d986efa8d78e25692ec013b444be495827669fd836fa5e611a1dc1a09c
- SSDEEP
  
  3072:UHJO+cNvqUYsEvS/xQOcifEW8MIYH15oS8eS3IikJ/wT2evLhIpS3O9zaJHe:wJAMsay7VQMIooZeD/fylI79aZe
Score

8^/10

discovery evasion persistence
- Stops running service(s)
  evasion
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Impair Defenses

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence