cfd250c8ba9f1bd5578c79d8314d75be9c0e1413fed246458a2c15d77f19696f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01a02a53fbe9e7664604415bc7884f9b.exe
Size

23KB
Sample

231230-vxr4tsdda6
MD5

01a02a53fbe9e7664604415bc7884f9b
SHA1

8eea2cbf56237f483d01e90a40b39439f7204fc9
SHA256

cfd250c8ba9f1bd5578c79d8314d75be9c0e1413fed246458a2c15d77f19696f
SHA512

e41871b8e40c028e5f927218ebc17ab8d8df1f870a2ff71ce04de15b221b7d15e05c45c43f06cdbd1fc4bc283a7249cb874e85d85a81bced52a25b3ed3e23bb4
SSDEEP

384:5PyZNjtU2mzQBz222KIWpHoqIjRfYPXE01fC4zEiwUiOtTOHDa:RyZ66Jd5oZxYP31fCYEiw41Om

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  01a02a53fbe9e7664604415bc7884f9b.exe
- Size
  
  23KB
- MD5
  
  01a02a53fbe9e7664604415bc7884f9b
- SHA1
  
  8eea2cbf56237f483d01e90a40b39439f7204fc9
- SHA256
  
  cfd250c8ba9f1bd5578c79d8314d75be9c0e1413fed246458a2c15d77f19696f
- SHA512
  
  e41871b8e40c028e5f927218ebc17ab8d8df1f870a2ff71ce04de15b221b7d15e05c45c43f06cdbd1fc4bc283a7249cb874e85d85a81bced52a25b3ed3e23bb4
- SSDEEP
  
  384:5PyZNjtU2mzQBz222KIWpHoqIjRfYPXE01fC4zEiwUiOtTOHDa:RyZ66Jd5oZxYP31fCYEiw41Om
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies AppInit DLL entries
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence