d84ea29fcd4ab5a567304cb1b1652e56598a5c074dcdbc6204c7cd3969162895 | Triage

Sharing

General

Target

NEAS.637fbd6373e34a549d167895bb0a9a90.exe
Size

4.3MB
Sample

231021-z7p5fafe22
MD5

637fbd6373e34a549d167895bb0a9a90
SHA1

11320ecabfdfacc6252c5dad2307e17fe616068e
SHA256

d84ea29fcd4ab5a567304cb1b1652e56598a5c074dcdbc6204c7cd3969162895
SHA512

6267503c6183e60be46bd71613cd37592c1df84b86b1a665bc15bb01eb38370b0edb6acf747ecba813bf4cbdbcede7bc1be2519d841424fd44b509b06f23a485
SSDEEP

98304:rKpNIdVbVHMWmRQFNyeW0MGfiUVSKdujPs:O7IPJHFNN8E7duzs

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  NEAS.637fbd6373e34a549d167895bb0a9a90.exe
- Size
  
  4.3MB
- MD5
  
  637fbd6373e34a549d167895bb0a9a90
- SHA1
  
  11320ecabfdfacc6252c5dad2307e17fe616068e
- SHA256
  
  d84ea29fcd4ab5a567304cb1b1652e56598a5c074dcdbc6204c7cd3969162895
- SHA512
  
  6267503c6183e60be46bd71613cd37592c1df84b86b1a665bc15bb01eb38370b0edb6acf747ecba813bf4cbdbcede7bc1be2519d841424fd44b509b06f23a485
- SSDEEP
  
  98304:rKpNIdVbVHMWmRQFNyeW0MGfiUVSKdujPs:O7IPJHFNN8E7duzs
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence