c9fa32eaeaaa76ba9b116b326afbbf360e19e6f0499e387c38f40bf449d96281 | Triage

Submit
Reports

Overview

overview

Static

static

c9fa32eaea...81.exe

windows7-x64

c9fa32eaea...81.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

Target

c9fa32eaeaaa76ba9b116b326afbbf360e19e6f0499e387c38f40bf449d96281
Size

160KB
Sample

221125-3d31zshd5w
MD5

37d10d6e504689d40c83833f045c2564
SHA1

6e45382875e47756bb6230e7b8afc4b8d00bbb76
SHA256

c9fa32eaeaaa76ba9b116b326afbbf360e19e6f0499e387c38f40bf449d96281
SHA512

9638b6525eb1df2888182de99c241ccb348f331e507ec4df37945f2e22cbae4b2769d662de50b1c13154d5b756f679bcacb845d8ec746727a5155c65915a1f3a
SSDEEP

3072:g8S95qYxk86VfZOmI+3RkOmPMYub1xAyCEzoiIodVChHY:YkFVdIhkYO1V3zoAmp

Score

10^/10

evasion persistence

Static task

static1

Behavioral task

behavioral1

Sample

c9fa32eaeaaa76ba9b116b326afbbf360e19e6f0499e387c38f40bf449d96281.exe

Resource

win7-20221111-en

evasion persistence

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

c9fa32eaeaaa76ba9b116b326afbbf360e19e6f0499e387c38f40bf449d96281.exe

Resource

win10v2004-20220901-en

windows10-2004-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  
  c9fa32eaeaaa76ba9b116b326afbbf360e19e6f0499e387c38f40bf449d96281
- Size
  
  160KB
- MD5
  
  37d10d6e504689d40c83833f045c2564
- SHA1
  
  6e45382875e47756bb6230e7b8afc4b8d00bbb76
- SHA256
  
  c9fa32eaeaaa76ba9b116b326afbbf360e19e6f0499e387c38f40bf449d96281
- SHA512
  
  9638b6525eb1df2888182de99c241ccb348f331e507ec4df37945f2e22cbae4b2769d662de50b1c13154d5b756f679bcacb845d8ec746727a5155c65915a1f3a
- SSDEEP
  
  3072:g8S95qYxk86VfZOmI+3RkOmPMYub1xAyCEzoiIodVChHY:YkFVdIhkYO1V3zoAmp
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies security service
  evasion
- Registers COM server for autorun
  persistence
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

© 2018-2025

Terms | Privacy