55671c1f1bec382222f2008309b54c4b767eac8a4c483279beacc8043d5de4c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

001f0439547b557d3e71663743f92893
Size

21KB
Sample

231229-wssegabag2
MD5

001f0439547b557d3e71663743f92893
SHA1

a82dd37a621fc6dc6064293e93cdc0263d02a696
SHA256

55671c1f1bec382222f2008309b54c4b767eac8a4c483279beacc8043d5de4c2
SHA512

4b6001f1e32cb0b339689d099a80d7657293dcf34a5a449926b4b18b2bcc123ea8101374122c562e87f1e59448fece7dd92c36a58f3b8502782d48b416d18ca3
SSDEEP

384:CyVlNjtU2e+goJPbxHpLw9n0I3Cm0TFNjseDQzzEsaceO:HVleSxJ89n0I5EF5suEEsadO

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  001f0439547b557d3e71663743f92893
- Size
  
  21KB
- MD5
  
  001f0439547b557d3e71663743f92893
- SHA1
  
  a82dd37a621fc6dc6064293e93cdc0263d02a696
- SHA256
  
  55671c1f1bec382222f2008309b54c4b767eac8a4c483279beacc8043d5de4c2
- SHA512
  
  4b6001f1e32cb0b339689d099a80d7657293dcf34a5a449926b4b18b2bcc123ea8101374122c562e87f1e59448fece7dd92c36a58f3b8502782d48b416d18ca3
- SSDEEP
  
  384:CyVlNjtU2e+goJPbxHpLw9n0I3Cm0TFNjseDQzzEsaceO:HVleSxJ89n0I5EF5suEEsadO
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies AppInit DLL entries
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

evasionpersistence