98c3a8de31df0c8f2d5063259159a6d02b594d150684b753ed84db218b01ea84 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26d742cb384f01def7edf82818fbfc3c
Size

82KB
Sample

231225-r6jbhadeb6
MD5

26d742cb384f01def7edf82818fbfc3c
SHA1

ce32a7d706317c492d1792a1c29dd1bf46e09407
SHA256

98c3a8de31df0c8f2d5063259159a6d02b594d150684b753ed84db218b01ea84
SHA512

080474471a5a82737c7a5dd4f70cec8c3bcc5ed1fcec1b387bfd35a54e29e871443103f65f93944c6c55d74464681c0f7835c5cd3cd1ef0c1479d9db7232b4d5
SSDEEP

1536:GzanVq7Nvsb2KFWh1GGfLmStHrhvHG/efUnLp1GMQXt1rA/iSzVl1ewBQULKM/5R:GzeVq1q/F01GYLhEBnLeMq9A/RZz7W4d

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  26d742cb384f01def7edf82818fbfc3c
- Size
  
  82KB
- MD5
  
  26d742cb384f01def7edf82818fbfc3c
- SHA1
  
  ce32a7d706317c492d1792a1c29dd1bf46e09407
- SHA256
  
  98c3a8de31df0c8f2d5063259159a6d02b594d150684b753ed84db218b01ea84
- SHA512
  
  080474471a5a82737c7a5dd4f70cec8c3bcc5ed1fcec1b387bfd35a54e29e871443103f65f93944c6c55d74464681c0f7835c5cd3cd1ef0c1479d9db7232b4d5
- SSDEEP
  
  1536:GzanVq7Nvsb2KFWh1GGfLmStHrhvHG/efUnLp1GMQXt1rA/iSzVl1ewBQULKM/5R:GzeVq1q/F01GYLhEBnLeMq9A/RZz7W4d
Score

8^/10

evasion persistence
- Modifies Windows Firewall
  evasion
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence