1d4dd1083fcb296c4732e79df77fcf8eb9af39ed25e18c0881e418447da246e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d4dd1083fcb296c4732e79df77fcf8eb9af39ed25e18c0881e418447da246e3
Size

130KB
Sample

221030-1fsa6acfcq
MD5

914a5897f5271b35d1b34db39145eaf1
SHA1

22b93d87be87d14323475843f89a4c6a04d336f6
SHA256

1d4dd1083fcb296c4732e79df77fcf8eb9af39ed25e18c0881e418447da246e3
SHA512

24e6f4837e68b6aa4ef12236db1e6374f1fef226fbb63f8b0c86f1b66125ffd4cfc343f08d425f5d97f557ecb91fece71aecd444f81c52aa428ce3684bf059e3
SSDEEP

1536:VfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbJdmz:VVqoCl/YgjxEufVU0TbTyDDalbmz

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  1d4dd1083fcb296c4732e79df77fcf8eb9af39ed25e18c0881e418447da246e3
- Size
  
  130KB
- MD5
  
  914a5897f5271b35d1b34db39145eaf1
- SHA1
  
  22b93d87be87d14323475843f89a4c6a04d336f6
- SHA256
  
  1d4dd1083fcb296c4732e79df77fcf8eb9af39ed25e18c0881e418447da246e3
- SHA512
  
  24e6f4837e68b6aa4ef12236db1e6374f1fef226fbb63f8b0c86f1b66125ffd4cfc343f08d425f5d97f557ecb91fece71aecd444f81c52aa428ce3684bf059e3
- SSDEEP
  
  1536:VfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbJdmz:VVqoCl/YgjxEufVU0TbTyDDalbmz
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence