82d738b05f196aeb7e51ea78dea500450355682e607ca804097cbd40b2963682 | Triage

Sharing

General

Target

00126939ef0420be5b13c77db024c872
Size

513KB
Sample

231229-wq65vaafb6
MD5

00126939ef0420be5b13c77db024c872
SHA1

83cb1d7d4eeb2d051d5ff968263e14a4f80cd4c7
SHA256

82d738b05f196aeb7e51ea78dea500450355682e607ca804097cbd40b2963682
SHA512

1ba8e29455e6f1b0a22ffa5b0aefa1cefcd45af8deb0eed1d2a3fde1ea479d32e6ae3b3ab16b6ecb5742f901443dceaa1718ae77fa4152578aed0a582aabb6c0
SSDEEP

384:TidD9d6GAW6AEiDlIgtapacv5nfHD7Aw/j+vREC5CsDanPzxTzYqiXb:G+DWlZN65/D7Z+vAsDWxTkqK

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  00126939ef0420be5b13c77db024c872
- Size
  
  513KB
- MD5
  
  00126939ef0420be5b13c77db024c872
- SHA1
  
  83cb1d7d4eeb2d051d5ff968263e14a4f80cd4c7
- SHA256
  
  82d738b05f196aeb7e51ea78dea500450355682e607ca804097cbd40b2963682
- SHA512
  
  1ba8e29455e6f1b0a22ffa5b0aefa1cefcd45af8deb0eed1d2a3fde1ea479d32e6ae3b3ab16b6ecb5742f901443dceaa1718ae77fa4152578aed0a582aabb6c0
- SSDEEP
  
  384:TidD9d6GAW6AEiDlIgtapacv5nfHD7Aw/j+vREC5CsDanPzxTzYqiXb:G+DWlZN65/D7Z+vAsDWxTkqK
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies AppInit DLL entries
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

evasionpersistence