522aeb5b70139cf1e04f1588c1711256c36ef2bbad162723b02e5fea8a5015f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

104aef2b63fb1b7add2c935ed9e720c6
Size

503KB
Sample

231230-gfgd4sffar
MD5

104aef2b63fb1b7add2c935ed9e720c6
SHA1

b1af56099f606e79ead0320d44fc3c7d2014ba0d
SHA256

522aeb5b70139cf1e04f1588c1711256c36ef2bbad162723b02e5fea8a5015f5
SHA512

c547d35f70b4c9d62b28c525f8ca55a756711e7488a411b1553c248f0edb98b14f26b7694add3a4fcacf73f20b57598130af28259f2ddf9bb25cdfdb64c339dc
SSDEEP

6144:Pn1rF9UWGT8tG/zrsftdajyxFtMZ8wHHAH1vfoXDCdm1bkihFcqY56rlsrXle:NrF9UWGT8tK6daexcZ3HAICObLFcZdVe

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  104aef2b63fb1b7add2c935ed9e720c6
- Size
  
  503KB
- MD5
  
  104aef2b63fb1b7add2c935ed9e720c6
- SHA1
  
  b1af56099f606e79ead0320d44fc3c7d2014ba0d
- SHA256
  
  522aeb5b70139cf1e04f1588c1711256c36ef2bbad162723b02e5fea8a5015f5
- SHA512
  
  c547d35f70b4c9d62b28c525f8ca55a756711e7488a411b1553c248f0edb98b14f26b7694add3a4fcacf73f20b57598130af28259f2ddf9bb25cdfdb64c339dc
- SSDEEP
  
  6144:Pn1rF9UWGT8tG/zrsftdajyxFtMZ8wHHAH1vfoXDCdm1bkihFcqY56rlsrXle:NrF9UWGT8tK6daexcZ3HAICObLFcZdVe
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence