75f833d7420b0c682639332b3371957dfbbe97814e64642e03d594312094188e | Triage

Sharing

General

Target

71d16da08fe43e91a4070f1aadcc8a70
Size

23KB
Sample

240124-k1lfcaeehm
MD5

71d16da08fe43e91a4070f1aadcc8a70
SHA1

eb30ab8ffbb568e97f49e33353528f07493ddd5d
SHA256

75f833d7420b0c682639332b3371957dfbbe97814e64642e03d594312094188e
SHA512

95b8ab7a068dfeb01421c81811e972c39f0648a260990b7cd42f9ba530c09e5271c54150862442672904ee3b0dcc16e57b67b99032ccacdac66668f43af8d353
SSDEEP

384:xidD9d6GAW6ABD9SkAOs91N9kj9TUEKvjmLzxTLG8U/:o+ascsjNW9I7KxTLA

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  71d16da08fe43e91a4070f1aadcc8a70
- Size
  
  23KB
- MD5
  
  71d16da08fe43e91a4070f1aadcc8a70
- SHA1
  
  eb30ab8ffbb568e97f49e33353528f07493ddd5d
- SHA256
  
  75f833d7420b0c682639332b3371957dfbbe97814e64642e03d594312094188e
- SHA512
  
  95b8ab7a068dfeb01421c81811e972c39f0648a260990b7cd42f9ba530c09e5271c54150862442672904ee3b0dcc16e57b67b99032ccacdac66668f43af8d353
- SSDEEP
  
  384:xidD9d6GAW6ABD9SkAOs91N9kj9TUEKvjmLzxTLG8U/:o+ascsjNW9I7KxTLA
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies AppInit DLL entries
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence