9724fd8e1b02c0c327ff054258ace4047a8b8dda46aebb0e1d4a4f7bd541b1c5 | Triage

Sharing

General

Target

9724fd8e1b02c0c327ff054258ace4047a8b8dda46aebb0e1d4a4f7bd541b1c5
Size

80KB
Sample

221206-yct98sgb96
MD5

c0026714eed50027fe46f751c8a10711
SHA1

471aaceec51d64baceebe48e64a9bc0d1bf58b8c
SHA256

9724fd8e1b02c0c327ff054258ace4047a8b8dda46aebb0e1d4a4f7bd541b1c5
SHA512

33ad93559401b07f10a9491628661272d259a74bbbf7d4b3d46683e4a58227979d87a01fd446a43d73bb9ac45216279f7ac7fffe9bd9e6fc0264f90792e6af07
SSDEEP

1536:FjL+WOsskr+2wMaK6RiAfLiYb6vTV/WWOOqeQmSY0Uy:FjlE2YfLiYuv1vOMgP

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  9724fd8e1b02c0c327ff054258ace4047a8b8dda46aebb0e1d4a4f7bd541b1c5
- Size
  
  80KB
- MD5
  
  c0026714eed50027fe46f751c8a10711
- SHA1
  
  471aaceec51d64baceebe48e64a9bc0d1bf58b8c
- SHA256
  
  9724fd8e1b02c0c327ff054258ace4047a8b8dda46aebb0e1d4a4f7bd541b1c5
- SHA512
  
  33ad93559401b07f10a9491628661272d259a74bbbf7d4b3d46683e4a58227979d87a01fd446a43d73bb9ac45216279f7ac7fffe9bd9e6fc0264f90792e6af07
- SSDEEP
  
  1536:FjL+WOsskr+2wMaK6RiAfLiYb6vTV/WWOOqeQmSY0Uy:FjlE2YfLiYuv1vOMgP
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence