2607124bedb00da29ef38cfec55807f7aba625df78da374f4598bef0cc92b501 | Triage

Sharing

General

Target

0004ce9e08c8853b5ab0d42a641fb987.exe
Size

21KB
Sample

231231-qge24sggbp
MD5

0004ce9e08c8853b5ab0d42a641fb987
SHA1

03e12f805a083ffa38d6b2781e2296381fad9955
SHA256

2607124bedb00da29ef38cfec55807f7aba625df78da374f4598bef0cc92b501
SHA512

9b1914cd3a9ee21c1653efdaaa67fcd06edcfcee0bb430a3a2ca16c97d2ac84cf2c4a1f24da6039f819809f18b23f11f4e0fe96d32973710a0875598942e541d
SSDEEP

384:bpdNjtU2OCN4NFcGqC5RE7nH0K7Hj86IXnWzwZ73xrp:bpdSDvEjH0cDb8nmwZ7T

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  0004ce9e08c8853b5ab0d42a641fb987.exe
- Size
  
  21KB
- MD5
  
  0004ce9e08c8853b5ab0d42a641fb987
- SHA1
  
  03e12f805a083ffa38d6b2781e2296381fad9955
- SHA256
  
  2607124bedb00da29ef38cfec55807f7aba625df78da374f4598bef0cc92b501
- SHA512
  
  9b1914cd3a9ee21c1653efdaaa67fcd06edcfcee0bb430a3a2ca16c97d2ac84cf2c4a1f24da6039f819809f18b23f11f4e0fe96d32973710a0875598942e541d
- SSDEEP
  
  384:bpdNjtU2OCN4NFcGqC5RE7nH0K7Hj86IXnWzwZ73xrp:bpdSDvEjH0cDb8nmwZ7T
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies AppInit DLL entries
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence