774e5570e6e09716f2299662d7955a77010ec256e383edcf7b494d7767e03a1f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b1511c9fcfb357f1e38d3169b050e00
Size

19KB
Sample

231226-npafgsefa7
MD5

6b1511c9fcfb357f1e38d3169b050e00
SHA1

d4cf51b1861f7fbaff447ac32532f72dda99a6d6
SHA256

774e5570e6e09716f2299662d7955a77010ec256e383edcf7b494d7767e03a1f
SHA512

1450c69042e476078afa846427021650e3138f51a9237043f4d89d0fa8cd856564be1c69469213f825a07ab3450abce016379e74691ca10edffde3fff5c0bf0b
SSDEEP

384:tPyZNjtU2mCAbAp9MjLDeowuTUl/nXTsjCynzEADM+pq:lyZbd82OTUlgCyzEADMP

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  6b1511c9fcfb357f1e38d3169b050e00
- Size
  
  19KB
- MD5
  
  6b1511c9fcfb357f1e38d3169b050e00
- SHA1
  
  d4cf51b1861f7fbaff447ac32532f72dda99a6d6
- SHA256
  
  774e5570e6e09716f2299662d7955a77010ec256e383edcf7b494d7767e03a1f
- SHA512
  
  1450c69042e476078afa846427021650e3138f51a9237043f4d89d0fa8cd856564be1c69469213f825a07ab3450abce016379e74691ca10edffde3fff5c0bf0b
- SSDEEP
  
  384:tPyZNjtU2mCAbAp9MjLDeowuTUl/nXTsjCynzEADM+pq:lyZbd82OTUlgCyzEADMP
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies AppInit DLL entries
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2