7fecfe224eaf5a37456a99fdadb6ca23ba30946f9a28d555f5890b6bbc8faee7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7fecfe224eaf5a37456a99fdadb6ca23ba30946f9a28d555f5890b6bbc8faee7
Size

30KB
Sample

221127-jjbn5sea21
MD5

5fb2ee0096da9e518be4d4642a3e7fc1
SHA1

cbca38bdce0c380110d213e4cd33698ad3d28ec8
SHA256

7fecfe224eaf5a37456a99fdadb6ca23ba30946f9a28d555f5890b6bbc8faee7
SHA512

9b27f25adb8d05cb645ee1ad9c127e5654fdddc9d53278f3d523bd09af1cf077d4078f4ee66b31dff5835a78577940499d64d42005c31a7ba1e22fa316e7a581
SSDEEP

384:gacP6KngetUkbuAOJLeRjyoIFCcRGBrrQM+p9qWszqsZZICQyy2+DVAdafigZ:6P64UkBSyeh/RGBrrKqZJZYz2H4K2

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  7fecfe224eaf5a37456a99fdadb6ca23ba30946f9a28d555f5890b6bbc8faee7
- Size
  
  30KB
- MD5
  
  5fb2ee0096da9e518be4d4642a3e7fc1
- SHA1
  
  cbca38bdce0c380110d213e4cd33698ad3d28ec8
- SHA256
  
  7fecfe224eaf5a37456a99fdadb6ca23ba30946f9a28d555f5890b6bbc8faee7
- SHA512
  
  9b27f25adb8d05cb645ee1ad9c127e5654fdddc9d53278f3d523bd09af1cf077d4078f4ee66b31dff5835a78577940499d64d42005c31a7ba1e22fa316e7a581
- SSDEEP
  
  384:gacP6KngetUkbuAOJLeRjyoIFCcRGBrrQM+p9qWszqsZZICQyy2+DVAdafigZ:6P64UkBSyeh/RGBrrKqZJZYz2H4K2
Score

8^/10

evasion persistence
- Disables Task Manager via registry modification
  evasion
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

evasionpersistence