acf797b15ce985351a3f652739faf7515478f2eee824e02c8b78fedc34a756dc | Triage

Sharing

General

Target

7676721620b07f6f5771109103e30b75
Size

436KB
Sample

240126-fsvxlaefh4
MD5

7676721620b07f6f5771109103e30b75
SHA1

ee20ab95de265f092a6f0c8c97b1b653a2583796
SHA256

acf797b15ce985351a3f652739faf7515478f2eee824e02c8b78fedc34a756dc
SHA512

c9d4731395dccfc7535bdec78ffa7e1fc4b74a393a3ee4403981a2df7d08c478e742e1ddb464aee7cb6603b42801b6671a1e7656c9f516c7c52575fbd7ccadb0
SSDEEP

6144:npUqMbsFS9IpMgsuk15EOCtrabCntJtetmerRZWp1TS5QybF/Q2I:7nFyIeuk7ETtWentgme6pG5/

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  7676721620b07f6f5771109103e30b75
- Size
  
  436KB
- MD5
  
  7676721620b07f6f5771109103e30b75
- SHA1
  
  ee20ab95de265f092a6f0c8c97b1b653a2583796
- SHA256
  
  acf797b15ce985351a3f652739faf7515478f2eee824e02c8b78fedc34a756dc
- SHA512
  
  c9d4731395dccfc7535bdec78ffa7e1fc4b74a393a3ee4403981a2df7d08c478e742e1ddb464aee7cb6603b42801b6671a1e7656c9f516c7c52575fbd7ccadb0
- SSDEEP
  
  6144:npUqMbsFS9IpMgsuk15EOCtrabCntJtetmerRZWp1TS5QybF/Q2I:7nFyIeuk7ETtWentgme6pG5/
Score

8^/10

evasion persistence
- Disables Task Manager via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2