12fafc52c5d67e9ce5913b2fe010b5f0a8333d660d2f9b151e7a625f4444c407 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ece075dc97570eab680b3e9b9a7e0ea
Size

335KB
Sample

231225-1ya5lagban
MD5

3ece075dc97570eab680b3e9b9a7e0ea
SHA1

746e8669ee598005be80e8f191c60780d03deff7
SHA256

12fafc52c5d67e9ce5913b2fe010b5f0a8333d660d2f9b151e7a625f4444c407
SHA512

ff5273a60dcb57d7af0ffc6eb2232e447673e3c0e67a02650f54eb5ebb40f6f0d15a5150dd55652975ec568d6703f5ca52b170b8e2d55837b8d82918eb5bca4e
SSDEEP

6144:NtKe6YiDdv3m3mgKHIl7bNIAROzTua3Wx3uz5ffDk8wW7L3J4XIIe6VN:NtKe6Zv23YdAPaieF3Dk8T7JODD

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  3ece075dc97570eab680b3e9b9a7e0ea
- Size
  
  335KB
- MD5
  
  3ece075dc97570eab680b3e9b9a7e0ea
- SHA1
  
  746e8669ee598005be80e8f191c60780d03deff7
- SHA256
  
  12fafc52c5d67e9ce5913b2fe010b5f0a8333d660d2f9b151e7a625f4444c407
- SHA512
  
  ff5273a60dcb57d7af0ffc6eb2232e447673e3c0e67a02650f54eb5ebb40f6f0d15a5150dd55652975ec568d6703f5ca52b170b8e2d55837b8d82918eb5bca4e
- SSDEEP
  
  6144:NtKe6YiDdv3m3mgKHIl7bNIAROzTua3Wx3uz5ffDk8wW7L3J4XIIe6VN:NtKe6Zv23YdAPaieF3Dk8T7JODD
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2