12b218d801418a280c48f934a352a73a142a74744aea76c9a54e100df001b778 | Triage

Sharing

General

Target

155b7e5a19a54d95cabfc50018d7f7a1.exe
Size

20KB
Sample

231231-p5775adbbl
MD5

155b7e5a19a54d95cabfc50018d7f7a1
SHA1

b013ebabdcdd64376a614720bed1dad15d7461f8
SHA256

12b218d801418a280c48f934a352a73a142a74744aea76c9a54e100df001b778
SHA512

bc48eb37d3a0e0d609fb3aad6d1bf47498922a69f5ec3995d7a510c313de92fa2fc9e77e594233d80dda70cb4cf76e8336d52f1a3018492dc83283ff2db0830b
SSDEEP

384:Yau0NKwWMwjV1ivDuXtpXGpLsLhNzhotz8Q70jZbzwuMYYOPE:hu056ncgWpoLhFh+z8Q70Fwu67

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  155b7e5a19a54d95cabfc50018d7f7a1.exe
- Size
  
  20KB
- MD5
  
  155b7e5a19a54d95cabfc50018d7f7a1
- SHA1
  
  b013ebabdcdd64376a614720bed1dad15d7461f8
- SHA256
  
  12b218d801418a280c48f934a352a73a142a74744aea76c9a54e100df001b778
- SHA512
  
  bc48eb37d3a0e0d609fb3aad6d1bf47498922a69f5ec3995d7a510c313de92fa2fc9e77e594233d80dda70cb4cf76e8336d52f1a3018492dc83283ff2db0830b
- SSDEEP
  
  384:Yau0NKwWMwjV1ivDuXtpXGpLsLhNzhotz8Q70jZbzwuMYYOPE:hu056ncgWpoLhFh+z8Q70Fwu67
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies AppInit DLL entries
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence