20593dbe97d1f5c1199844f40f2d80c240e6c40d21e1d89870898e007a3c1a8d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20593dbe97d1f5c1199844f40f2d80c240e6c40d21e1d89870898e007a3c1a8d
Size

72KB
Sample

221107-wfsjpsafb5
MD5

0e384863597e4fb7a103e27dfc78f70b
SHA1

1392ca707d46836d5dfb16f095eba215bbe43768
SHA256

20593dbe97d1f5c1199844f40f2d80c240e6c40d21e1d89870898e007a3c1a8d
SHA512

92ce1abb9b10f1820fdafc5c758c440292044979d1dc0a600e26cf5fae56bc358db0a49313c5ff023b016c8920db39d1b03cdf0b3251693b2fa879216925d399
SSDEEP

384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2b:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrH

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  20593dbe97d1f5c1199844f40f2d80c240e6c40d21e1d89870898e007a3c1a8d
- Size
  
  72KB
- MD5
  
  0e384863597e4fb7a103e27dfc78f70b
- SHA1
  
  1392ca707d46836d5dfb16f095eba215bbe43768
- SHA256
  
  20593dbe97d1f5c1199844f40f2d80c240e6c40d21e1d89870898e007a3c1a8d
- SHA512
  
  92ce1abb9b10f1820fdafc5c758c440292044979d1dc0a600e26cf5fae56bc358db0a49313c5ff023b016c8920db39d1b03cdf0b3251693b2fa879216925d399
- SSDEEP
  
  384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2b:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrH
Score

10^/10

evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2