9bdd1157dc5f23851505232152055e00f07bcf7ac47aa8c55e7964f1ad83549d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bdd1157dc5f23851505232152055e00f07bcf7ac47aa8c55e7964f1ad83549d
Size

3.9MB
Sample

231118-n9zk4sea42
MD5

92b38863c1352369f9896c27882ad240
SHA1

08cd9a0de1c9ed26a50526fec170f63527692728
SHA256

9bdd1157dc5f23851505232152055e00f07bcf7ac47aa8c55e7964f1ad83549d
SHA512

89ed5b9c7ccbf684817e373fb98a7dad491d1a4f3fae756d1f8fed1094b4cff84da17b384c35791865af73c8a34e4829f8d7205ce79ed9029a622f8fcdbd2e5c
SSDEEP

49152:I5nHGDg4rAtexhgKtxkA2C7qJF5LVBFhyzw3Ld7qlV0000Fg:IcE4r/hgW7qJrJ7qb0000q

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  9bdd1157dc5f23851505232152055e00f07bcf7ac47aa8c55e7964f1ad83549d
- Size
  
  3.9MB
- MD5
  
  92b38863c1352369f9896c27882ad240
- SHA1
  
  08cd9a0de1c9ed26a50526fec170f63527692728
- SHA256
  
  9bdd1157dc5f23851505232152055e00f07bcf7ac47aa8c55e7964f1ad83549d
- SHA512
  
  89ed5b9c7ccbf684817e373fb98a7dad491d1a4f3fae756d1f8fed1094b4cff84da17b384c35791865af73c8a34e4829f8d7205ce79ed9029a622f8fcdbd2e5c
- SSDEEP
  
  49152:I5nHGDg4rAtexhgKtxkA2C7qJF5LVBFhyzw3Ld7qlV0000Fg:IcE4r/hgW7qJrJ7qb0000q
Score

8^/10

persistence
- Drops file in Drivers directory
- Sets service image path in registry
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2