23cab836cb36577e019529042032968b2189934439b5dec4ecf67b37c6fcd288 | Triage

Sharing

General

Target

23cab836cb36577e019529042032968b2189934439b5dec4ecf67b37c6fcd288
Size

1.3MB
Sample

221123-lscnxafe8x
MD5

b76b36a569290052a1332b942719bbd3
SHA1

8eec0a2806c866393f5ea72f700e2903839276d5
SHA256

23cab836cb36577e019529042032968b2189934439b5dec4ecf67b37c6fcd288
SHA512

b0d11c44913ea923670c7c8a68a90257ef5aa538dd7220aee225af5f8b45106f5ed898bffa1c934945878cc5170477b5877146025ca4df3600ab7901f1a3e5f0
SSDEEP

12288:NSyKO6Y0jQy7HoANQI0UM9h/wuWXp02zZYcUW1odProbdpX:Nx/QjQy7fCdlLr7wecdodTsdd

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  23cab836cb36577e019529042032968b2189934439b5dec4ecf67b37c6fcd288
- Size
  
  1.3MB
- MD5
  
  b76b36a569290052a1332b942719bbd3
- SHA1
  
  8eec0a2806c866393f5ea72f700e2903839276d5
- SHA256
  
  23cab836cb36577e019529042032968b2189934439b5dec4ecf67b37c6fcd288
- SHA512
  
  b0d11c44913ea923670c7c8a68a90257ef5aa538dd7220aee225af5f8b45106f5ed898bffa1c934945878cc5170477b5877146025ca4df3600ab7901f1a3e5f0
- SSDEEP
  
  12288:NSyKO6Y0jQy7HoANQI0UM9h/wuWXp02zZYcUW1odProbdpX:Nx/QjQy7fCdlLr7wecdodTsdd
Score

8^/10

evasion persistence
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence