f23f372f3e3a2744c573be85fbc8de39fa52381f086b780443f5e0c8c7c31d3b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f23f372f3e3a2744c573be85fbc8de39fa52381f086b780443f5e0c8c7c31d3b
Size

72KB
Sample

221202-yjtmaagh54
MD5

017fb55f2f38f840bb038b5cb62fe589
SHA1

bf75092749266fbb9218d963b48a49cc559ebfc0
SHA256

f23f372f3e3a2744c573be85fbc8de39fa52381f086b780443f5e0c8c7c31d3b
SHA512

00a9f3e98a00cc0692691e6bcd0d9ff42e78b01a38df8cea4a0fd1124a5df97e6d8d1784ee117c10c9530e852c49689105e8227021e6f3873a303053903fe2e5
SSDEEP

384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2A:ipQNwC3BEddsEqOt/hyJF+x3BEJwRr8

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  f23f372f3e3a2744c573be85fbc8de39fa52381f086b780443f5e0c8c7c31d3b
- Size
  
  72KB
- MD5
  
  017fb55f2f38f840bb038b5cb62fe589
- SHA1
  
  bf75092749266fbb9218d963b48a49cc559ebfc0
- SHA256
  
  f23f372f3e3a2744c573be85fbc8de39fa52381f086b780443f5e0c8c7c31d3b
- SHA512
  
  00a9f3e98a00cc0692691e6bcd0d9ff42e78b01a38df8cea4a0fd1124a5df97e6d8d1784ee117c10c9530e852c49689105e8227021e6f3873a303053903fe2e5
- SSDEEP
  
  384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2A:ipQNwC3BEddsEqOt/hyJF+x3BEJwRr8
Score

10^/10

evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2