6ca1968da63206acb7ba33275d6627ba885ed3f6494af4a95f4f6031abc4c332 | Triage

Sharing

General

Target

6ca1968da63206acb7ba33275d6627ba885ed3f6494af4a95f4f6031abc4c332
Size

72KB
Sample

221129-rfm7rsab8v
MD5

0920e14418689838405e640db96c90ed
SHA1

956a4af37c4eb8b093efa43ccbafba324e4189d5
SHA256

6ca1968da63206acb7ba33275d6627ba885ed3f6494af4a95f4f6031abc4c332
SHA512

17a8614586358e6c5a0c2366e0548c7fe0c4296dae0cd245bdb141dfd8046a67d2e5d34a184f63f04f17e3e0f563dc8cfee83f74ba86b5c164e68864302d8336
SSDEEP

384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2u:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrP6

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  6ca1968da63206acb7ba33275d6627ba885ed3f6494af4a95f4f6031abc4c332
- Size
  
  72KB
- MD5
  
  0920e14418689838405e640db96c90ed
- SHA1
  
  956a4af37c4eb8b093efa43ccbafba324e4189d5
- SHA256
  
  6ca1968da63206acb7ba33275d6627ba885ed3f6494af4a95f4f6031abc4c332
- SHA512
  
  17a8614586358e6c5a0c2366e0548c7fe0c4296dae0cd245bdb141dfd8046a67d2e5d34a184f63f04f17e3e0f563dc8cfee83f74ba86b5c164e68864302d8336
- SSDEEP
  
  384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2u:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrP6
Score

10^/10

evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2