390c68f29ffd370235d0ab4f6ba2e786faea183ef43a903ba5959c70c475a5f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

390c68f29ffd370235d0ab4f6ba2e786faea183ef43a903ba5959c70c475a5f8
Size

72KB
Sample

221107-wdm67scggp
MD5

0df70e47fff8b6baf8300939c72d753a
SHA1

06f4a3c1f96254f4e8b43a3d22996659381d7133
SHA256

390c68f29ffd370235d0ab4f6ba2e786faea183ef43a903ba5959c70c475a5f8
SHA512

417a4dc3a15630f6f59b22f2ebe40be2e59edd5a046cdace77ffaed3d6045b0a932cbb64f87b2027f778b82ed2ac3116c0a0a9ea78896c5c060979581d4181ec
SSDEEP

384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2w:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrM

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  390c68f29ffd370235d0ab4f6ba2e786faea183ef43a903ba5959c70c475a5f8
- Size
  
  72KB
- MD5
  
  0df70e47fff8b6baf8300939c72d753a
- SHA1
  
  06f4a3c1f96254f4e8b43a3d22996659381d7133
- SHA256
  
  390c68f29ffd370235d0ab4f6ba2e786faea183ef43a903ba5959c70c475a5f8
- SHA512
  
  417a4dc3a15630f6f59b22f2ebe40be2e59edd5a046cdace77ffaed3d6045b0a932cbb64f87b2027f778b82ed2ac3116c0a0a9ea78896c5c060979581d4181ec
- SSDEEP
  
  384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2w:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrM
Score

10^/10

evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2