bb7d581ed68ea4cd2766e302a7f18bf96a1f1ca1166b2854e0c433b48eec8369 | Triage

Sharing

General

Target

bb7d581ed68ea4cd2766e302a7f18bf96a1f1ca1166b2854e0c433b48eec8369
Size

44KB
Sample

221123-vecanagg69
MD5

4f453f85983c414469d969d02c0b2a00
SHA1

e619e3c5ec9c8ad4fd84e293953b0fd2ee062cc1
SHA256

bb7d581ed68ea4cd2766e302a7f18bf96a1f1ca1166b2854e0c433b48eec8369
SHA512

41ed61a49c0182567386b0468150fef135a833d57140160b6bf319955ca87001d9971d657362147b51686b1d3f24b9b08085e931c554e227d80a8122f94cec99
SSDEEP

768:s/5KlU+GX4puve9T+RnmxuGFQPk52jngbHsMztGLk6E39:Y+GeN6u2ssMztGLk13

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  bb7d581ed68ea4cd2766e302a7f18bf96a1f1ca1166b2854e0c433b48eec8369
- Size
  
  44KB
- MD5
  
  4f453f85983c414469d969d02c0b2a00
- SHA1
  
  e619e3c5ec9c8ad4fd84e293953b0fd2ee062cc1
- SHA256
  
  bb7d581ed68ea4cd2766e302a7f18bf96a1f1ca1166b2854e0c433b48eec8369
- SHA512
  
  41ed61a49c0182567386b0468150fef135a833d57140160b6bf319955ca87001d9971d657362147b51686b1d3f24b9b08085e931c554e227d80a8122f94cec99
- SSDEEP
  
  768:s/5KlU+GX4puve9T+RnmxuGFQPk52jngbHsMztGLk6E39:Y+GeN6u2ssMztGLk13
Score

8^/10

evasion persistence
- Adds policy Run key to start application
  persistence
- Blocks application from running via registry modification
  Adds application to list of disallowed applications.
  evasion
- Disables RegEdit via registry modification
  evasion
- Disables Task Manager via registry modification
  evasion
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence