94bca6065a694200df09742d609e9e1d7304f338aaa819d0fcafa00a5f7ea0eb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94bca6065a694200df09742d609e9e1d7304f338aaa819d0fcafa00a5f7ea0eb
Size

76KB
Sample

221129-fsjjkagf93
MD5

e57c118267efc922cc0a239851bf1e30
SHA1

010ea211cd93a374c2d588a28e57f60b1f7051b7
SHA256

94bca6065a694200df09742d609e9e1d7304f338aaa819d0fcafa00a5f7ea0eb
SHA512

da53dfe1b6f6a65eafa4aa7a577083f9639861a8524b8f00e1f420c8493afdbc05296dead1130faea6793ab86399179016179fd18e504418fe07ea935923a240
SSDEEP

1536:9iLQekT049P0zK5O/u92pHh9Oqwa1jrc:ssXT0K55+HeaZrc

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  94bca6065a694200df09742d609e9e1d7304f338aaa819d0fcafa00a5f7ea0eb
- Size
  
  76KB
- MD5
  
  e57c118267efc922cc0a239851bf1e30
- SHA1
  
  010ea211cd93a374c2d588a28e57f60b1f7051b7
- SHA256
  
  94bca6065a694200df09742d609e9e1d7304f338aaa819d0fcafa00a5f7ea0eb
- SHA512
  
  da53dfe1b6f6a65eafa4aa7a577083f9639861a8524b8f00e1f420c8493afdbc05296dead1130faea6793ab86399179016179fd18e504418fe07ea935923a240
- SSDEEP
  
  1536:9iLQekT049P0zK5O/u92pHh9Oqwa1jrc:ssXT0K55+HeaZrc
Score

8^/10

evasion persistence
- Stops running service(s)
  evasion
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Impair Defenses

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence