6fdad469e57694656fe9f81689b60e3585f846605f867030726f2f397f5217fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

394df27306164ded7436bcdcf8652516
Size

1.9MB
Sample

231231-rg8j4abean
MD5

394df27306164ded7436bcdcf8652516
SHA1

06f87ed1bc949dfa9921c3c407eff14205e905e1
SHA256

6fdad469e57694656fe9f81689b60e3585f846605f867030726f2f397f5217fc
SHA512

89406f408023364b52f5140c31845ebffc7b0d68efe00fa151d4ae060fe52e594b6ea82e88c9e0152d7d5320cd39464feb88619b71ec020268c0f8bb5fef9b73
SSDEEP

49152:oLVCag+1WlyTqlDoJC9yASTOVLk2fz0Hxe:oRCag+1WltlGjiV57w

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  394df27306164ded7436bcdcf8652516
- Size
  
  1.9MB
- MD5
  
  394df27306164ded7436bcdcf8652516
- SHA1
  
  06f87ed1bc949dfa9921c3c407eff14205e905e1
- SHA256
  
  6fdad469e57694656fe9f81689b60e3585f846605f867030726f2f397f5217fc
- SHA512
  
  89406f408023364b52f5140c31845ebffc7b0d68efe00fa151d4ae060fe52e594b6ea82e88c9e0152d7d5320cd39464feb88619b71ec020268c0f8bb5fef9b73
- SSDEEP
  
  49152:oLVCag+1WlyTqlDoJC9yASTOVLk2fz0Hxe:oRCag+1WltlGjiV57w
Score

8^/10

evasion persistence
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence