ed57fc1d2e993ad7aa7379101a7a123ef68c1964f18584821160a3f451568e59 | Triage

Sharing

General

Target

ed57fc1d2e993ad7aa7379101a7a123ef68c1964f18584821160a3f451568e59
Size

333KB
Sample

221123-pz2s6afg2x
MD5

69ab01b47fd822fdf529be8116b673ac
SHA1

c258a48a383231c8bbe7121d6c717b9b2ee36eff
SHA256

ed57fc1d2e993ad7aa7379101a7a123ef68c1964f18584821160a3f451568e59
SHA512

9166cebc5cce97a03f29b2f98a2705a62fd12072f79155b07cac12273d4973ebbf70a5ffe80f866c65354c0e439e06c7366fe96a66945d157655a0adf111f003
SSDEEP

6144:BdR9WOoVB2h95RzUWW7IBz8bIMp70foKQQ3U9etVd:BdPFDvo78zHQQ3Rt

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  ed57fc1d2e993ad7aa7379101a7a123ef68c1964f18584821160a3f451568e59
- Size
  
  333KB
- MD5
  
  69ab01b47fd822fdf529be8116b673ac
- SHA1
  
  c258a48a383231c8bbe7121d6c717b9b2ee36eff
- SHA256
  
  ed57fc1d2e993ad7aa7379101a7a123ef68c1964f18584821160a3f451568e59
- SHA512
  
  9166cebc5cce97a03f29b2f98a2705a62fd12072f79155b07cac12273d4973ebbf70a5ffe80f866c65354c0e439e06c7366fe96a66945d157655a0adf111f003
- SSDEEP
  
  6144:BdR9WOoVB2h95RzUWW7IBz8bIMp70foKQQ3U9etVd:BdPFDvo78zHQQ3Rt
Score

8^/10

evasion persistence
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Modifies Installed Components in the registry
  persistence
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2