81d4cba5449a8335f43db3bd3a15c6a75aec987f068b5b42b21cf73e930bfd29 | Triage

Sharing

General

Target

00013f4d52b192cfeb1272618caf1c46.exe
Size

515KB
Sample

231231-qc9qxsfefj
MD5

00013f4d52b192cfeb1272618caf1c46
SHA1

29ea4acc1039f1cb1a102d73cfc0811034dddc70
SHA256

81d4cba5449a8335f43db3bd3a15c6a75aec987f068b5b42b21cf73e930bfd29
SHA512

42e6b0c9fe5091d3fff6123908edcbd6eb059537c775aa54dde2899fd4737bd79ed47ccdb8344d24189f160e1bb46047eb66a37019164098767a2d3f071e501c
SSDEEP

384:vdD9d6G4HegkfkfD1Xlr5+VxacKwN3hHkNrdsDypRabEec3kh1xAszXar1erIMP:vPDf21XufacD3hENMcRZA1GMXaBerD

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  00013f4d52b192cfeb1272618caf1c46.exe
- Size
  
  515KB
- MD5
  
  00013f4d52b192cfeb1272618caf1c46
- SHA1
  
  29ea4acc1039f1cb1a102d73cfc0811034dddc70
- SHA256
  
  81d4cba5449a8335f43db3bd3a15c6a75aec987f068b5b42b21cf73e930bfd29
- SHA512
  
  42e6b0c9fe5091d3fff6123908edcbd6eb059537c775aa54dde2899fd4737bd79ed47ccdb8344d24189f160e1bb46047eb66a37019164098767a2d3f071e501c
- SSDEEP
  
  384:vdD9d6G4HegkfkfD1Xlr5+VxacKwN3hHkNrdsDypRabEec3kh1xAszXar1erIMP:vPDf21XufacD3hENMcRZA1GMXaBerD
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies AppInit DLL entries
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

evasionpersistence