d2c45fb0814de0faaba6b39a0e5ef18707d7d4bc43db85fcf2eb8e6529dd483f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2c45fb0814de0faaba6b39a0e5ef18707d7d4bc43db85fcf2eb8e6529dd483f
Size

28KB
Sample

221106-fams9scge5
MD5

21a1328793e1f61d5e5da52d2bbbf0f0
SHA1

b535d5d4f6a8e3f415be439da8a7259911250f5d
SHA256

d2c45fb0814de0faaba6b39a0e5ef18707d7d4bc43db85fcf2eb8e6529dd483f
SHA512

362e448d4c99e3342111f2243751dd95eefd2c7b043d7b7c37103af2b3fc9e029c4c03c5fec557eced12359867e0210a35afbe4751d9d4c4c290c58c7563b22d
SSDEEP

768:qaM2n1o+Cm14tuq8LJeNeJC+5iudM8X2AEBrx:5M21f140qU5i9N9N

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  d2c45fb0814de0faaba6b39a0e5ef18707d7d4bc43db85fcf2eb8e6529dd483f
- Size
  
  28KB
- MD5
  
  21a1328793e1f61d5e5da52d2bbbf0f0
- SHA1
  
  b535d5d4f6a8e3f415be439da8a7259911250f5d
- SHA256
  
  d2c45fb0814de0faaba6b39a0e5ef18707d7d4bc43db85fcf2eb8e6529dd483f
- SHA512
  
  362e448d4c99e3342111f2243751dd95eefd2c7b043d7b7c37103af2b3fc9e029c4c03c5fec557eced12359867e0210a35afbe4751d9d4c4c290c58c7563b22d
- SSDEEP
  
  768:qaM2n1o+Cm14tuq8LJeNeJC+5iudM8X2AEBrx:5M21f140qU5i9N9N
Score

8^/10

evasion persistence
- Disables Task Manager via registry modification
  evasion
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

evasionpersistence