601ffbef4f0ceb380de98dda2f9efb8bbdb27181e532836ab395fc83ea632ca1 | Triage

Sharing

General

Target

601ffbef4f0ceb380de98dda2f9efb8bbdb27181e532836ab395fc83ea632ca1
Size

82KB
Sample

221028-w5bbqaacg2
MD5

0abae74c7bbad71c155b2118e7ee4940
SHA1

2998d8351a09817dcdb75a27f5bd1be59cb1b84b
SHA256

601ffbef4f0ceb380de98dda2f9efb8bbdb27181e532836ab395fc83ea632ca1
SHA512

b719a8abe6e553284204de4047cc5c4b138ec35c932f1a780416fa7da51ceef413a466755b893c804aefb945e1ec7ebee9226d855ea7da4f0d7a6c044a2dd46e
SSDEEP

768:rqzsEaCY3vj0HMfUk2UIfFemsMTjeM0cAfvqAoLTXLYYxAghrzu+zZHHfYV0djWq:mA7C5kUpvMO/ToUWfrFWFrDGztrkEODZ

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  601ffbef4f0ceb380de98dda2f9efb8bbdb27181e532836ab395fc83ea632ca1
- Size
  
  82KB
- MD5
  
  0abae74c7bbad71c155b2118e7ee4940
- SHA1
  
  2998d8351a09817dcdb75a27f5bd1be59cb1b84b
- SHA256
  
  601ffbef4f0ceb380de98dda2f9efb8bbdb27181e532836ab395fc83ea632ca1
- SHA512
  
  b719a8abe6e553284204de4047cc5c4b138ec35c932f1a780416fa7da51ceef413a466755b893c804aefb945e1ec7ebee9226d855ea7da4f0d7a6c044a2dd46e
- SSDEEP
  
  768:rqzsEaCY3vj0HMfUk2UIfFemsMTjeM0cAfvqAoLTXLYYxAghrzu+zZHHfYV0djWq:mA7C5kUpvMO/ToUWfrFWFrDGztrkEODZ
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Drops file in Drivers directory
- Sets service image path in registry
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence