5d81fb7f1cf3c8c9db6368e523f6391e5347d1ef63a344f7bf3c472e52f7f408 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d81fb7f1cf3c8c9db6368e523f6391e5347d1ef63a344f7bf3c472e52f7f408
Size

72KB
Sample

221129-rhptdaad6w
MD5

0b63997a9abaed399935dda3ad01ad6e
SHA1

7be1435511919c63b35e17f7ca618135659cc0ba
SHA256

5d81fb7f1cf3c8c9db6368e523f6391e5347d1ef63a344f7bf3c472e52f7f408
SHA512

92e54b6d9aca2074cc121913342de2f553c94a71179388363d684486bc1c62c911e149d22fc99b9510508e317cf393905e7177e02d626bfa9387a1b3177b0e6e
SSDEEP

384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2s:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrPY

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  5d81fb7f1cf3c8c9db6368e523f6391e5347d1ef63a344f7bf3c472e52f7f408
- Size
  
  72KB
- MD5
  
  0b63997a9abaed399935dda3ad01ad6e
- SHA1
  
  7be1435511919c63b35e17f7ca618135659cc0ba
- SHA256
  
  5d81fb7f1cf3c8c9db6368e523f6391e5347d1ef63a344f7bf3c472e52f7f408
- SHA512
  
  92e54b6d9aca2074cc121913342de2f553c94a71179388363d684486bc1c62c911e149d22fc99b9510508e317cf393905e7177e02d626bfa9387a1b3177b0e6e
- SSDEEP
  
  384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2s:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrPY
Score

10^/10

evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2