87c4f827fbdc685ac6e2d64d7ee94680cf0c0759335ecbfd06d2f258d0ea9529 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87c4f827fbdc685ac6e2d64d7ee94680cf0c0759335ecbfd06d2f258d0ea9529
Size

322KB
Sample

221129-gzq3nafh4x
MD5

46b68ad0419044c10ad0e6c926933b6f
SHA1

e83776f68613ab71115f3ed8b814a9c3777d2cfb
SHA256

87c4f827fbdc685ac6e2d64d7ee94680cf0c0759335ecbfd06d2f258d0ea9529
SHA512

aae6ca30fe64c17ec1483141b1d2e33c1d1e7e09184d97422c4c03f0de5c5e6bd292cc55b89af052d1615850a635bd0d5aba40b2bbd073f848fec02d243c27bc
SSDEEP

6144:Rok2/kvd+LEa4x3pmIf3HPPtbhlR478/1TN+U0Xs4yhwTM4:i8vPa4RpH/NJN+Ts5wTB

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  87c4f827fbdc685ac6e2d64d7ee94680cf0c0759335ecbfd06d2f258d0ea9529
- Size
  
  322KB
- MD5
  
  46b68ad0419044c10ad0e6c926933b6f
- SHA1
  
  e83776f68613ab71115f3ed8b814a9c3777d2cfb
- SHA256
  
  87c4f827fbdc685ac6e2d64d7ee94680cf0c0759335ecbfd06d2f258d0ea9529
- SHA512
  
  aae6ca30fe64c17ec1483141b1d2e33c1d1e7e09184d97422c4c03f0de5c5e6bd292cc55b89af052d1615850a635bd0d5aba40b2bbd073f848fec02d243c27bc
- SSDEEP
  
  6144:Rok2/kvd+LEa4x3pmIf3HPPtbhlR478/1TN+U0Xs4yhwTM4:i8vPa4RpH/NJN+Ts5wTB
Score

8^/10

evasion persistence
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Modifies Installed Components in the registry
  persistence
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2