8ee76799220183625f317f176086db2c95af7099c1c0edf8dd6eff3711c4ad4f | Triage

Sharing

General

Target

3d15e6c18de827e82a8020e1c6475ba8
Size

123KB
Sample

231225-z44hnachgn
MD5

3d15e6c18de827e82a8020e1c6475ba8
SHA1

4cac5c1f282875a7b3026b76c63eaea9bd71ce7d
SHA256

8ee76799220183625f317f176086db2c95af7099c1c0edf8dd6eff3711c4ad4f
SHA512

e600a8d516dccf91877853fffca0208d789f8972ebe2992eba65b57269cc4351e90687f5f6b1035305f7d9163eca6cfc44c8a42c2a065f9f4f6974b41a7c5fba
SSDEEP

1536:S8VEUVSldQEUWgxvOaxMz3+ZkewyJir7uFz3/MLurpRdCpCA1dW:S8VEbdsW+vO6Mz3h9roz1rpRkzd

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  3d15e6c18de827e82a8020e1c6475ba8
- Size
  
  123KB
- MD5
  
  3d15e6c18de827e82a8020e1c6475ba8
- SHA1
  
  4cac5c1f282875a7b3026b76c63eaea9bd71ce7d
- SHA256
  
  8ee76799220183625f317f176086db2c95af7099c1c0edf8dd6eff3711c4ad4f
- SHA512
  
  e600a8d516dccf91877853fffca0208d789f8972ebe2992eba65b57269cc4351e90687f5f6b1035305f7d9163eca6cfc44c8a42c2a065f9f4f6974b41a7c5fba
- SSDEEP
  
  1536:S8VEUVSldQEUWgxvOaxMz3+ZkewyJir7uFz3/MLurpRdCpCA1dW:S8VEbdsW+vO6Mz3h9roz1rpRkzd
Score

8^/10

evasion persistence
- Modifies Windows Firewall
  evasion
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2