9e9911b56903eabfd2f18a80df08f30a8282f366af63d54bf1ea52fc7acbda7d | Triage

Sharing

General

Target

45d3d1f1394d6831317220b8d4d664fd
Size

420KB
Sample

240106-kyh77scbfk
MD5

45d3d1f1394d6831317220b8d4d664fd
SHA1

269fdeed147022fe4c6cd4f2ed509973a2e3d308
SHA256

9e9911b56903eabfd2f18a80df08f30a8282f366af63d54bf1ea52fc7acbda7d
SHA512

b6f8e25fca27948e4b88a2d3d5a223e1be72724054d583fa04b7f52e73dd97be4515068080ce0298b72fbc302f95713483ccaf2ee6f4900381a10be124765eee
SSDEEP

6144:zK3HTNGVvHI2zBHng5HaVsbZgRnyR4mULJhkHM6jI7H1D7puVS0:23HcVvo21ga0aQ4HLJhkHM6jI7VD7wZ

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  45d3d1f1394d6831317220b8d4d664fd
- Size
  
  420KB
- MD5
  
  45d3d1f1394d6831317220b8d4d664fd
- SHA1
  
  269fdeed147022fe4c6cd4f2ed509973a2e3d308
- SHA256
  
  9e9911b56903eabfd2f18a80df08f30a8282f366af63d54bf1ea52fc7acbda7d
- SHA512
  
  b6f8e25fca27948e4b88a2d3d5a223e1be72724054d583fa04b7f52e73dd97be4515068080ce0298b72fbc302f95713483ccaf2ee6f4900381a10be124765eee
- SSDEEP
  
  6144:zK3HTNGVvHI2zBHng5HaVsbZgRnyR4mULJhkHM6jI7H1D7puVS0:23HcVvo21ga0aQ4HLJhkHM6jI7VD7wZ
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Adds policy Run key to start application
  persistence
- Modifies Installed Components in the registry
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence