7a7109fbc1c67f808e7e3e40cfdc18646063e1762a5edaec94c6a03dd907c995 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a7109fbc1c67f808e7e3e40cfdc18646063e1762a5edaec94c6a03dd907c995
Size

104KB
Sample

221201-2ga9psgg36
MD5

20929196f554c649d332980f24692ef7
SHA1

44c9f272a74794f1d1b27a7476fd79e5ec9fdc10
SHA256

7a7109fbc1c67f808e7e3e40cfdc18646063e1762a5edaec94c6a03dd907c995
SHA512

8dbc7fb467749f79a4191c8bb24950232905b4f22b8faab5b87a268cea7df307f6cd39a8011301bfcd4ed820bc2f32270f039e36a19e5b4bbdef9993229405fb
SSDEEP

3072:jE+HkRVn3fjKuaujqJ0geyhc4N73lTpU:zkXK6O0dyT7

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  7a7109fbc1c67f808e7e3e40cfdc18646063e1762a5edaec94c6a03dd907c995
- Size
  
  104KB
- MD5
  
  20929196f554c649d332980f24692ef7
- SHA1
  
  44c9f272a74794f1d1b27a7476fd79e5ec9fdc10
- SHA256
  
  7a7109fbc1c67f808e7e3e40cfdc18646063e1762a5edaec94c6a03dd907c995
- SHA512
  
  8dbc7fb467749f79a4191c8bb24950232905b4f22b8faab5b87a268cea7df307f6cd39a8011301bfcd4ed820bc2f32270f039e36a19e5b4bbdef9993229405fb
- SSDEEP
  
  3072:jE+HkRVn3fjKuaujqJ0geyhc4N73lTpU:zkXK6O0dyT7
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies Windows Firewall
  evasion
- Drops startup file
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2