ee931e2b69578bbf503c256c93b88f50345d47b376b879c98d229a9a0625be5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee931e2b69578bbf503c256c93b88f50345d47b376b879c98d229a9a0625be5d
Size

216KB
Sample

221205-2k589adg67
MD5

80ef218fa61a2ebd6da7a38347cfa684
SHA1

24e1f98f8bb9097ecf7f1a48d53bf1dce7b655c5
SHA256

ee931e2b69578bbf503c256c93b88f50345d47b376b879c98d229a9a0625be5d
SHA512

efa35a72bb5563f87e9e09cb7e28aa9a84291a49443340aad6db713d5378dbfcd2633bcfbe01b0aeebe044d1308de38256e258dd2690c72fe58ddd726476062d
SSDEEP

6144:7LLLO1Afz1txlTCl5G+EynAB/lWiGncfI:7y14Pxlul5G1yAlWiGnc

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  ee931e2b69578bbf503c256c93b88f50345d47b376b879c98d229a9a0625be5d
- Size
  
  216KB
- MD5
  
  80ef218fa61a2ebd6da7a38347cfa684
- SHA1
  
  24e1f98f8bb9097ecf7f1a48d53bf1dce7b655c5
- SHA256
  
  ee931e2b69578bbf503c256c93b88f50345d47b376b879c98d229a9a0625be5d
- SHA512
  
  efa35a72bb5563f87e9e09cb7e28aa9a84291a49443340aad6db713d5378dbfcd2633bcfbe01b0aeebe044d1308de38256e258dd2690c72fe58ddd726476062d
- SSDEEP
  
  6144:7LLLO1Afz1txlTCl5G+EynAB/lWiGncfI:7y14Pxlul5G1yAlWiGnc
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2