6bbad96225df153b663724747f7b55683fdaed243c01e7c9723e751c8575d08a | Triage

Sharing

General

Target

4ff367f716b3cffe0895e10544fb147e
Size

23KB
Sample

240110-jbdhrsbahp
MD5

4ff367f716b3cffe0895e10544fb147e
SHA1

1f711bdeb90589bb27b7ec08c082d446c15f135c
SHA256

6bbad96225df153b663724747f7b55683fdaed243c01e7c9723e751c8575d08a
SHA512

29456e0580eff278f97477cd4793ba3ad38ce07105ab4dfb41e02f973c68d7ecbf9fdcb9a0e5aff874ee4b2833c42c3127e9932316fafa36faf0d989f5005188
SSDEEP

384:LPyZNjtU2miIQWNpbstZDZkviwdYehC9eRjQvd4QGv1izXG1uVHMZHn:TyZKf8Gvzt19Qvd4FvYXG1uVUn

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  4ff367f716b3cffe0895e10544fb147e
- Size
  
  23KB
- MD5
  
  4ff367f716b3cffe0895e10544fb147e
- SHA1
  
  1f711bdeb90589bb27b7ec08c082d446c15f135c
- SHA256
  
  6bbad96225df153b663724747f7b55683fdaed243c01e7c9723e751c8575d08a
- SHA512
  
  29456e0580eff278f97477cd4793ba3ad38ce07105ab4dfb41e02f973c68d7ecbf9fdcb9a0e5aff874ee4b2833c42c3127e9932316fafa36faf0d989f5005188
- SSDEEP
  
  384:LPyZNjtU2miIQWNpbstZDZkviwdYehC9eRjQvd4QGv1izXG1uVHMZHn:TyZKf8Gvzt19Qvd4FvYXG1uVUn
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies AppInit DLL entries
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

evasionpersistence