a0962a75db446f935df94bcd29a1d1eda6c9c24b666b574761bd42301e16d01e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0012e66e28f4836dbc688165df8ade89
Size

21KB
Sample

231229-wq9wqsfbhl
MD5

0012e66e28f4836dbc688165df8ade89
SHA1

22fc8692c84f936da2d9c68ae2f9229a18239d15
SHA256

a0962a75db446f935df94bcd29a1d1eda6c9c24b666b574761bd42301e16d01e
SHA512

359907b6c500a690d705c0f5aada0d155f91fdb29d80a79c9947a10d2644800e53b00b6ae622c86fbc086975baf40ff19dbf45b2488e1190321d32d2215f3737
SSDEEP

384:aPyZNjtU2mGAbAJ/5g8XOP4bu73sMKhxApWm2BsjbluYn6zE7a4KU9Fk:ayZ/drtO4uzsJhm2cYYn6E77KU9O

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  0012e66e28f4836dbc688165df8ade89
- Size
  
  21KB
- MD5
  
  0012e66e28f4836dbc688165df8ade89
- SHA1
  
  22fc8692c84f936da2d9c68ae2f9229a18239d15
- SHA256
  
  a0962a75db446f935df94bcd29a1d1eda6c9c24b666b574761bd42301e16d01e
- SHA512
  
  359907b6c500a690d705c0f5aada0d155f91fdb29d80a79c9947a10d2644800e53b00b6ae622c86fbc086975baf40ff19dbf45b2488e1190321d32d2215f3737
- SSDEEP
  
  384:aPyZNjtU2mGAbAJ/5g8XOP4bu73sMKhxApWm2BsjbluYn6zE7a4KU9Fk:ayZ/drtO4uzsJhm2cYYn6E77KU9O
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies AppInit DLL entries
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2