e64f8aee573ca3686c27b6009fd8b914602c3b731ee390ae80d1fb8376bfc8d9 | Triage

Sharing

General

Target

e64f8aee573ca3686c27b6009fd8b914602c3b731ee390ae80d1fb8376bfc8d9
Size

72KB
Sample

221129-qy28zagd5t
MD5

06dfec4c3ff5b4af77e68b57dea37250
SHA1

601d704ca43f57df6cdc3c5b7b505de900a9a2de
SHA256

e64f8aee573ca3686c27b6009fd8b914602c3b731ee390ae80d1fb8376bfc8d9
SHA512

003a2819a3188b3e4113c17acdc17a15ab7f6a7189715e2cdcd1f68d9eb00a311a0e19554ff4c64bc18d9cd1bbdb2e3cd5499ca9216c5040fcb17859549a994c
SSDEEP

384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf25:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrV

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  e64f8aee573ca3686c27b6009fd8b914602c3b731ee390ae80d1fb8376bfc8d9
- Size
  
  72KB
- MD5
  
  06dfec4c3ff5b4af77e68b57dea37250
- SHA1
  
  601d704ca43f57df6cdc3c5b7b505de900a9a2de
- SHA256
  
  e64f8aee573ca3686c27b6009fd8b914602c3b731ee390ae80d1fb8376bfc8d9
- SHA512
  
  003a2819a3188b3e4113c17acdc17a15ab7f6a7189715e2cdcd1f68d9eb00a311a0e19554ff4c64bc18d9cd1bbdb2e3cd5499ca9216c5040fcb17859549a994c
- SSDEEP
  
  384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf25:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrV
Score

10^/10

evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2