6b41a7cd82c8503ddb18b08a5c914e42c049188182b44425af0759ad63d76124 | Triage

Sharing

General

Target

6b41a7cd82c8503ddb18b08a5c914e42c049188182b44425af0759ad63d76124
Size

84KB
Sample

221129-d66j5sbg73
MD5

28ab605229eb269b23ea36564b41e7c0
SHA1

daa8e03380fcaf383d799601e54d808a2a78361d
SHA256

6b41a7cd82c8503ddb18b08a5c914e42c049188182b44425af0759ad63d76124
SHA512

dc4292a4c5640d7077e70d4c1cf3af453d688cbdfec205f5314963d8d2137f9fe29ed4f52fe4164509954f9b4f0230e32136aaa47f3bdddb377d29de3cf5919c
SSDEEP

1536:koAOKT66jhJl7SkkeYL737prxrXd48CSvx:A6SJ5keMDXfp

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  6b41a7cd82c8503ddb18b08a5c914e42c049188182b44425af0759ad63d76124
- Size
  
  84KB
- MD5
  
  28ab605229eb269b23ea36564b41e7c0
- SHA1
  
  daa8e03380fcaf383d799601e54d808a2a78361d
- SHA256
  
  6b41a7cd82c8503ddb18b08a5c914e42c049188182b44425af0759ad63d76124
- SHA512
  
  dc4292a4c5640d7077e70d4c1cf3af453d688cbdfec205f5314963d8d2137f9fe29ed4f52fe4164509954f9b4f0230e32136aaa47f3bdddb377d29de3cf5919c
- SSDEEP
  
  1536:koAOKT66jhJl7SkkeYL737prxrXd48CSvx:A6SJ5keMDXfp
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2