7cdf5982e722ea0819723490f6d55d4065735c2665a28045615dcfac08d3fb97 | Triage

Sharing

General

Target

7cdf5982e722ea0819723490f6d55d4065735c2665a28045615dcfac08d3fb97
Size

113KB
Sample

221125-kv3gnseg79
MD5

90d01ab29395d9636c7bf12cb2dd5b81
SHA1

316f77354804d693ec7eacbe753020b3cfd6389f
SHA256

7cdf5982e722ea0819723490f6d55d4065735c2665a28045615dcfac08d3fb97
SHA512

0c5e297b9d26735e4eaa8305bee698c62fcd54a7c17ba12bbebcf161f685efedd6ee1bb6e8c9c4864f65005b20802c25c5d32ed93b5854827bb696dfdfd4ff90
SSDEEP

1536:f9dD1Wz9XA2eb7VKiM7+EU86rZb3AA6dWJpLhNhK:fX1WzFA2eby7+EUrZN6dWvFPK

Score

8^/10

agilenet evasion persistence

Malware Config

Targets

- Target
  
  7cdf5982e722ea0819723490f6d55d4065735c2665a28045615dcfac08d3fb97
- Size
  
  113KB
- MD5
  
  90d01ab29395d9636c7bf12cb2dd5b81
- SHA1
  
  316f77354804d693ec7eacbe753020b3cfd6389f
- SHA256
  
  7cdf5982e722ea0819723490f6d55d4065735c2665a28045615dcfac08d3fb97
- SHA512
  
  0c5e297b9d26735e4eaa8305bee698c62fcd54a7c17ba12bbebcf161f685efedd6ee1bb6e8c9c4864f65005b20802c25c5d32ed93b5854827bb696dfdfd4ff90
- SSDEEP
  
  1536:f9dD1Wz9XA2eb7VKiM7+EU86rZb3AA6dWJpLhNhK:fX1WzFA2eby7+EUrZN6dWvFPK
Score

8^/10

evasion persistence
- Modifies Windows Firewall
  evasion
- Drops startup file
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2