c8a3103d94971343fa0e1be5f2b1aac9de63f7276c95a95bc9783a22a037009c | Triage

Sharing

General

Target

c8a3103d94971343fa0e1be5f2b1aac9de63f7276c95a95bc9783a22a037009c
Size

58KB
Sample

221121-vg7jksac24
MD5

3333ca5007f8b5720927abea78295870
SHA1

885f7fc4591dd88ff94b1dd198925b900ecbd772
SHA256

c8a3103d94971343fa0e1be5f2b1aac9de63f7276c95a95bc9783a22a037009c
SHA512

8b051b09e21cbd3625b40697728d655943b46c31aee785d09e3c5fe6a82b50f009601f9e55c102391a32d8082ecaa432b5fdf7591d112375104459a527fbfd66
SSDEEP

1536:mHMvi7ZSoqGS/vupyOsR5fg9jtR9IuZ70HbBvqki:mbTqDOWeRmq7AVCki

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  c8a3103d94971343fa0e1be5f2b1aac9de63f7276c95a95bc9783a22a037009c
- Size
  
  58KB
- MD5
  
  3333ca5007f8b5720927abea78295870
- SHA1
  
  885f7fc4591dd88ff94b1dd198925b900ecbd772
- SHA256
  
  c8a3103d94971343fa0e1be5f2b1aac9de63f7276c95a95bc9783a22a037009c
- SHA512
  
  8b051b09e21cbd3625b40697728d655943b46c31aee785d09e3c5fe6a82b50f009601f9e55c102391a32d8082ecaa432b5fdf7591d112375104459a527fbfd66
- SSDEEP
  
  1536:mHMvi7ZSoqGS/vupyOsR5fg9jtR9IuZ70HbBvqki:mbTqDOWeRmq7AVCki
Score

8^/10

evasion persistence
- Adds policy Run key to start application
  persistence
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence