ccd703cac6afd7ecd5e37ab25eaff8ad782cbf6c7ef1e0e058f8e058e1194d39 | Triage

Sharing

General

Target

ccd703cac6afd7ecd5e37ab25eaff8ad782cbf6c7ef1e0e058f8e058e1194d39
Size

480KB
Sample

221207-as62zahf68
MD5

5aefbf7188920f39e2db62405e4701a3
SHA1

9f7c34b0ff892a712d233ad58faa139a9182d046
SHA256

ccd703cac6afd7ecd5e37ab25eaff8ad782cbf6c7ef1e0e058f8e058e1194d39
SHA512

ff722139a89a535d53e5005071bb31efaece27ae8310737b4bd32ebe0b659319860d0ee56c7d02bf108e67e287bfaa2d7ebfd6b37cf074238ff5c0aacb2910d9
SSDEEP

12288:tsDDRcAN6xVIUUmLeYgUFYHCfl/YIbJbjxcjT9P:+PCxVIUUm2UNNXbRCn9P

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  ccd703cac6afd7ecd5e37ab25eaff8ad782cbf6c7ef1e0e058f8e058e1194d39
- Size
  
  480KB
- MD5
  
  5aefbf7188920f39e2db62405e4701a3
- SHA1
  
  9f7c34b0ff892a712d233ad58faa139a9182d046
- SHA256
  
  ccd703cac6afd7ecd5e37ab25eaff8ad782cbf6c7ef1e0e058f8e058e1194d39
- SHA512
  
  ff722139a89a535d53e5005071bb31efaece27ae8310737b4bd32ebe0b659319860d0ee56c7d02bf108e67e287bfaa2d7ebfd6b37cf074238ff5c0aacb2910d9
- SSDEEP
  
  12288:tsDDRcAN6xVIUUmLeYgUFYHCfl/YIbJbjxcjT9P:+PCxVIUUm2UNNXbRCn9P
Score

8^/10

evasion persistence
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

evasionpersistence