d489fc966c9dc77c2e311e8a289f883788458de446974d987b059cf314bce98c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15d9605bb75a858dc39da8622d56be80
Size

902KB
Sample

231224-2eyxzsehg7
MD5

15d9605bb75a858dc39da8622d56be80
SHA1

16ac0ffbd12acf017a89902b798ae97bb5dc5b40
SHA256

d489fc966c9dc77c2e311e8a289f883788458de446974d987b059cf314bce98c
SHA512

eb1cd634648d16ba446bf69b6096517c27af738ab31c0ce8cbf5a1d1dfad6426735108f0a8420ce6e40d46529bcab3c808e0fa06577764330bdeaa3d8cb07c4e
SSDEEP

24576:GFGPW4tpJVsZoht3WpwdnmaQYbUfz/e35mkoKaaMj2J:GUdJVXht3egnm0bS2obKQg

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  15d9605bb75a858dc39da8622d56be80
- Size
  
  902KB
- MD5
  
  15d9605bb75a858dc39da8622d56be80
- SHA1
  
  16ac0ffbd12acf017a89902b798ae97bb5dc5b40
- SHA256
  
  d489fc966c9dc77c2e311e8a289f883788458de446974d987b059cf314bce98c
- SHA512
  
  eb1cd634648d16ba446bf69b6096517c27af738ab31c0ce8cbf5a1d1dfad6426735108f0a8420ce6e40d46529bcab3c808e0fa06577764330bdeaa3d8cb07c4e
- SSDEEP
  
  24576:GFGPW4tpJVsZoht3WpwdnmaQYbUfz/e35mkoKaaMj2J:GUdJVXht3egnm0bS2obKQg
Score

8^/10

evasion persistence
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence