4e6740435de944e3f8135241bd6c76aedd3ab9bacaf75acd11a31fd0ea57b319 | Triage

Sharing

General

Target

4e6740435de944e3f8135241bd6c76aedd3ab9bacaf75acd11a31fd0ea57b319
Size

415KB
Sample

221127-jzv3qabe87
MD5

0f9703b147cf0c8a884019cb1bafe08c
SHA1

633bff3c09940f99de3e4d1421c66d118086f3cf
SHA256

4e6740435de944e3f8135241bd6c76aedd3ab9bacaf75acd11a31fd0ea57b319
SHA512

2d259c75729b25b23a3848592477fe64cc2b2bad5c4fc44cd32c43fe064b41ea5e2eba6a80ca1d009426d725d38a836282613e423812572b1e4f6937640350e3
SSDEEP

12288:/36YkiWzQXZ1+La51ID6DQoyazsfyRVOC:sK1kamMwpC

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  4e6740435de944e3f8135241bd6c76aedd3ab9bacaf75acd11a31fd0ea57b319
- Size
  
  415KB
- MD5
  
  0f9703b147cf0c8a884019cb1bafe08c
- SHA1
  
  633bff3c09940f99de3e4d1421c66d118086f3cf
- SHA256
  
  4e6740435de944e3f8135241bd6c76aedd3ab9bacaf75acd11a31fd0ea57b319
- SHA512
  
  2d259c75729b25b23a3848592477fe64cc2b2bad5c4fc44cd32c43fe064b41ea5e2eba6a80ca1d009426d725d38a836282613e423812572b1e4f6937640350e3
- SSDEEP
  
  12288:/36YkiWzQXZ1+La51ID6DQoyazsfyRVOC:sK1kamMwpC
Score

8^/10

evasion persistence
- Executes dropped EXE
- Modifies Windows Firewall
  evasion
- Drops startup file
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2