bf7baca4631d7c39b707c2999632d9031871b842452d25de35194fbfd8f3a106 | Triage

Sharing

General

Target

bf7baca4631d7c39b707c2999632d9031871b842452d25de35194fbfd8f3a106
Size

232KB
Sample

221129-vnp8wabh7t
MD5

1896bc5d2d0c6cfbd39c323c3c1058df
SHA1

3c27f74ba0c41fa8c09a11ffc39972eb0f3fbca8
SHA256

bf7baca4631d7c39b707c2999632d9031871b842452d25de35194fbfd8f3a106
SHA512

0af3a6e21de54aba62eff793711a4f75f7813098177eeae82627f5dc196b892721376be63bc102373d57b1934a82d115708cba6a1de287b2eab7dd4d48cae502
SSDEEP

6144:Ft3PFKs78g2KyEOaWEqxF6snji81RUinKdNOR:PPh+mFg

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  bf7baca4631d7c39b707c2999632d9031871b842452d25de35194fbfd8f3a106
- Size
  
  232KB
- MD5
  
  1896bc5d2d0c6cfbd39c323c3c1058df
- SHA1
  
  3c27f74ba0c41fa8c09a11ffc39972eb0f3fbca8
- SHA256
  
  bf7baca4631d7c39b707c2999632d9031871b842452d25de35194fbfd8f3a106
- SHA512
  
  0af3a6e21de54aba62eff793711a4f75f7813098177eeae82627f5dc196b892721376be63bc102373d57b1934a82d115708cba6a1de287b2eab7dd4d48cae502
- SSDEEP
  
  6144:Ft3PFKs78g2KyEOaWEqxF6snji81RUinKdNOR:PPh+mFg
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2