af0ffbce35a5bc2f2cb74e0b90397a744f1d2dc41ed535a310c4d1f27cf4bccd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af0ffbce35a5bc2f2cb74e0b90397a744f1d2dc41ed535a310c4d1f27cf4bccd
Size

72KB
Sample

221029-w6xaksagan
MD5

84a5061f21a04e1896f3f63dd5ddb408
SHA1

642cccb7f7374588b53de4ecbcbde1f89cf3e05c
SHA256

af0ffbce35a5bc2f2cb74e0b90397a744f1d2dc41ed535a310c4d1f27cf4bccd
SHA512

63bb46913acf38fbf55de4c731cf5d440502fc903b740ef19f3de60a62c46abde34eb06536e6bdc6982e2d4c9375085c0902ad9678fdbd71bf034b7d393a778e
SSDEEP

384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2/:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrT

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  af0ffbce35a5bc2f2cb74e0b90397a744f1d2dc41ed535a310c4d1f27cf4bccd
- Size
  
  72KB
- MD5
  
  84a5061f21a04e1896f3f63dd5ddb408
- SHA1
  
  642cccb7f7374588b53de4ecbcbde1f89cf3e05c
- SHA256
  
  af0ffbce35a5bc2f2cb74e0b90397a744f1d2dc41ed535a310c4d1f27cf4bccd
- SHA512
  
  63bb46913acf38fbf55de4c731cf5d440502fc903b740ef19f3de60a62c46abde34eb06536e6bdc6982e2d4c9375085c0902ad9678fdbd71bf034b7d393a778e
- SSDEEP
  
  384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2/:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrT
Score

10^/10

evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2