f84647f865560cf22233d4d2affc86c456f1cf7831216784c2362ac39355315d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00012c7e677a5de8e10570ea1ae44ed6.exe
Size

22KB
Sample

231231-p88casgfc2
MD5

00012c7e677a5de8e10570ea1ae44ed6
SHA1

839c3aa87794a5cfa6b4c5432f2b2c34a9eab4d8
SHA256

f84647f865560cf22233d4d2affc86c456f1cf7831216784c2362ac39355315d
SHA512

40bc37fb625d60feb8591c875f082047589dc34fc5c6b49b4ac5b68d8ca67cc8ac285dbffd344adf97638935bdcea07cbbbf1e56351e2bb172c7be1f6dda792d
SSDEEP

384:xyVlNjtU2eK9AbAV8iDOVGCF1ApyDT3IzNrYwjo7DYAlEpWT9zXfo49TxDV:UVl7d2qGk1YAonYATRXfo49Tv

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  00012c7e677a5de8e10570ea1ae44ed6.exe
- Size
  
  22KB
- MD5
  
  00012c7e677a5de8e10570ea1ae44ed6
- SHA1
  
  839c3aa87794a5cfa6b4c5432f2b2c34a9eab4d8
- SHA256
  
  f84647f865560cf22233d4d2affc86c456f1cf7831216784c2362ac39355315d
- SHA512
  
  40bc37fb625d60feb8591c875f082047589dc34fc5c6b49b4ac5b68d8ca67cc8ac285dbffd344adf97638935bdcea07cbbbf1e56351e2bb172c7be1f6dda792d
- SSDEEP
  
  384:xyVlNjtU2eK9AbAV8iDOVGCF1ApyDT3IzNrYwjo7DYAlEpWT9zXfo49TxDV:UVl7d2qGk1YAonYATRXfo49Tv
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies AppInit DLL entries
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence