5bfc6e6261495a8e4a968fc0170181b723e3647d7e43e6ba74e3572bd7f76f1c | Triage

Sharing

General

Target

20f23133004922fdeccdf1b9a4f69ed5
Size

1.4MB
Sample

231231-abrkyscag8
MD5

20f23133004922fdeccdf1b9a4f69ed5
SHA1

fdb6b6859e8b13fcee4053a0f4d28b6aebe72e2a
SHA256

5bfc6e6261495a8e4a968fc0170181b723e3647d7e43e6ba74e3572bd7f76f1c
SHA512

90ba71d5c5e8455f06a79222468de82712c1e752b3a6925f18aae49d6a71f3d8a1fd3b0ad0c9d564ec8597c634da541e8dd8950e33c63590bec0772e0a5b025c
SSDEEP

3072:8MBwCbm8zxdAgDADIgBnsTaNkayQ9BKJR:8MB/m8zDAFIuk

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  20f23133004922fdeccdf1b9a4f69ed5
- Size
  
  1.4MB
- MD5
  
  20f23133004922fdeccdf1b9a4f69ed5
- SHA1
  
  fdb6b6859e8b13fcee4053a0f4d28b6aebe72e2a
- SHA256
  
  5bfc6e6261495a8e4a968fc0170181b723e3647d7e43e6ba74e3572bd7f76f1c
- SHA512
  
  90ba71d5c5e8455f06a79222468de82712c1e752b3a6925f18aae49d6a71f3d8a1fd3b0ad0c9d564ec8597c634da541e8dd8950e33c63590bec0772e0a5b025c
- SSDEEP
  
  3072:8MBwCbm8zxdAgDADIgBnsTaNkayQ9BKJR:8MB/m8zDAFIuk
Score

10^/10

evasion persistence
- Modifies security service
  evasion
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence