a26ec2ebf63315c01ad8a9e64dc4c07e0487011b0b95f754162ad3fe99cd0e10 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a26ec2ebf63315c01ad8a9e64dc4c07e0487011b0b95f754162ad3fe99cd0e10
Size

41KB
Sample

221201-afcycsge83
MD5

6312c92a75b9aacc994c0485846730f0
SHA1

ad0a345dbaadaa0705a0150694f0f50984688d7e
SHA256

a26ec2ebf63315c01ad8a9e64dc4c07e0487011b0b95f754162ad3fe99cd0e10
SHA512

ba0c26509f60a44978bfce46817997d56463e782a5bc97c26a646cebd34c35a0afc3ac7d09fdd153d0a8add3b73bb0c01d919154643d46fd6f0411134caf9ba7
SSDEEP

768:dFDZ297K733ZL4OsPDsJOQICmcS7miUCbCB0ZOYirm3V1yoaChDl1F/oKaW7WXJo:oe18OyszIz7miUCbcYomLaoDHRJaW7

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  a26ec2ebf63315c01ad8a9e64dc4c07e0487011b0b95f754162ad3fe99cd0e10
- Size
  
  41KB
- MD5
  
  6312c92a75b9aacc994c0485846730f0
- SHA1
  
  ad0a345dbaadaa0705a0150694f0f50984688d7e
- SHA256
  
  a26ec2ebf63315c01ad8a9e64dc4c07e0487011b0b95f754162ad3fe99cd0e10
- SHA512
  
  ba0c26509f60a44978bfce46817997d56463e782a5bc97c26a646cebd34c35a0afc3ac7d09fdd153d0a8add3b73bb0c01d919154643d46fd6f0411134caf9ba7
- SSDEEP
  
  768:dFDZ297K733ZL4OsPDsJOQICmcS7miUCbCB0ZOYirm3V1yoaChDl1F/oKaW7WXJo:oe18OyszIz7miUCbcYomLaoDHRJaW7
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

evasionpersistence