e8a1a76dc179eef0bfaade31c6a2d1ad7a6d9b6a86524fbe3a01b6afcf204f6d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8a1a76dc179eef0bfaade31c6a2d1ad7a6d9b6a86524fbe3a01b6afcf204f6d
Size

372KB
Sample

221201-2fekqsgf56
MD5

42ed20f06eca830572afdcaa737212b4
SHA1

9bbd33622f44e9b51a357cdcd85a8ef27176d439
SHA256

e8a1a76dc179eef0bfaade31c6a2d1ad7a6d9b6a86524fbe3a01b6afcf204f6d
SHA512

5a5b65dd926c0a58c87e97427345cc015d0c1ebab2a705e8fccfb52b38578ab97c4367aa03addf4cd628f08368ff99ea16d039e02a8798cd367307b535804315
SSDEEP

6144:za9wAbn4Dhpt/gYLxuX+OhSQVdFowhPXsJIALly:5Abn4NpGGYhlVdFoakJzQ

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  e8a1a76dc179eef0bfaade31c6a2d1ad7a6d9b6a86524fbe3a01b6afcf204f6d
- Size
  
  372KB
- MD5
  
  42ed20f06eca830572afdcaa737212b4
- SHA1
  
  9bbd33622f44e9b51a357cdcd85a8ef27176d439
- SHA256
  
  e8a1a76dc179eef0bfaade31c6a2d1ad7a6d9b6a86524fbe3a01b6afcf204f6d
- SHA512
  
  5a5b65dd926c0a58c87e97427345cc015d0c1ebab2a705e8fccfb52b38578ab97c4367aa03addf4cd628f08368ff99ea16d039e02a8798cd367307b535804315
- SSDEEP
  
  6144:za9wAbn4Dhpt/gYLxuX+OhSQVdFowhPXsJIALly:5Abn4NpGGYhlVdFoakJzQ
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2