5270d43c1a0fd187ba40272781020581b4eda331d98c2baf218d072422bd4941 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5270d43c1a0fd187ba40272781020581b4eda331d98c2baf218d072422bd4941
Size

72KB
Sample

221107-wbrfvaadb4
MD5

0eb0311b1fca5cb6c66b91bfcb1d7e1d
SHA1

3c93e1e815c5a2cda3700300a7e8b49c7fc998e1
SHA256

5270d43c1a0fd187ba40272781020581b4eda331d98c2baf218d072422bd4941
SHA512

cf98b056e96287a8242da9f07a1bc8954a5ce33b7a95a4a76c234a037579bcc80a29bef0684f8fc2856181bd2166dcb89960c0388dc50508856adc4002235312
SSDEEP

384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2a:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrm

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  5270d43c1a0fd187ba40272781020581b4eda331d98c2baf218d072422bd4941
- Size
  
  72KB
- MD5
  
  0eb0311b1fca5cb6c66b91bfcb1d7e1d
- SHA1
  
  3c93e1e815c5a2cda3700300a7e8b49c7fc998e1
- SHA256
  
  5270d43c1a0fd187ba40272781020581b4eda331d98c2baf218d072422bd4941
- SHA512
  
  cf98b056e96287a8242da9f07a1bc8954a5ce33b7a95a4a76c234a037579bcc80a29bef0684f8fc2856181bd2166dcb89960c0388dc50508856adc4002235312
- SSDEEP
  
  384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2a:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrm
Score

10^/10

evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2