cdc78c0483d93592b21eab286aeb2a726b306768b339020722b259169d7e2641 | Triage

Sharing

General

Target

cdc78c0483d93592b21eab286aeb2a726b306768b339020722b259169d7e2641
Size

3.2MB
Sample

230330-lm928ade4s
MD5

aabd0123bb50d8e1a975b83cc7abb051
SHA1

4fa7c7d5b333d2bf44d4e4290f7fe012d433acfa
SHA256

cdc78c0483d93592b21eab286aeb2a726b306768b339020722b259169d7e2641
SHA512

812afc4a004b60ab53c6e29fbf041a8882ef65049e374eced93e03cf6fadcee82a61d416cd82b364e7bb64bd028247d00c021d377b32d1d8372ad17b6ccd21e4
SSDEEP

98304:dlcGMKNkqS5tBqra2KV716Fl2a4FcA5aUcU:dlcGPCqS4a2o1GPA5fcU

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  cdc78c0483d93592b21eab286aeb2a726b306768b339020722b259169d7e2641
- Size
  
  3.2MB
- MD5
  
  aabd0123bb50d8e1a975b83cc7abb051
- SHA1
  
  4fa7c7d5b333d2bf44d4e4290f7fe012d433acfa
- SHA256
  
  cdc78c0483d93592b21eab286aeb2a726b306768b339020722b259169d7e2641
- SHA512
  
  812afc4a004b60ab53c6e29fbf041a8882ef65049e374eced93e03cf6fadcee82a61d416cd82b364e7bb64bd028247d00c021d377b32d1d8372ad17b6ccd21e4
- SSDEEP
  
  98304:dlcGMKNkqS5tBqra2KV716Fl2a4FcA5aUcU:dlcGPCqS4a2o1GPA5fcU
Score

8^/10

evasion persistence
- Creates new service(s)
  persistence
- Sets service image path in registry
  persistence
- Stops running service(s)
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Registers COM server for autorun
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

New Service

Registry Run Keys / Startup Folder

Privilege Escalation

New Service

Defense Evasion

Impair Defenses

Install Root Certificate

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence