0aafb211f16a57b7faa028dc77321972efca3dc1c1b150786934308b164762fb | Triage

Sharing

General

Target

a1759d1c3c5ca06ade5eb6227e831d87
Size

420KB
Sample

240224-kwyj4sga3v
MD5

a1759d1c3c5ca06ade5eb6227e831d87
SHA1

9a0f1ccd4e8a52220f33b019b59c2b1ba53ed425
SHA256

0aafb211f16a57b7faa028dc77321972efca3dc1c1b150786934308b164762fb
SHA512

1d7d704dc865341c56d453ad9b9df617c4f5d518a6a8dd7ba7eb455e40a5418e923c1fdc16bdb47ec236ee87200a2ab278fe3ff4fdf7c1e798d3f107f9c28ab0
SSDEEP

6144:7K3HTNGVvHI2zBHng5HaVsbZgRnyR4mULJhkHM6jI7H1D7puVS1:e3HcVvo21ga0aQ4HLJhkHM6jI7VD7w0

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  a1759d1c3c5ca06ade5eb6227e831d87
- Size
  
  420KB
- MD5
  
  a1759d1c3c5ca06ade5eb6227e831d87
- SHA1
  
  9a0f1ccd4e8a52220f33b019b59c2b1ba53ed425
- SHA256
  
  0aafb211f16a57b7faa028dc77321972efca3dc1c1b150786934308b164762fb
- SHA512
  
  1d7d704dc865341c56d453ad9b9df617c4f5d518a6a8dd7ba7eb455e40a5418e923c1fdc16bdb47ec236ee87200a2ab278fe3ff4fdf7c1e798d3f107f9c28ab0
- SSDEEP
  
  6144:7K3HTNGVvHI2zBHng5HaVsbZgRnyR4mULJhkHM6jI7H1D7puVS1:e3HcVvo21ga0aQ4HLJhkHM6jI7VD7w0
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Adds policy Run key to start application
  persistence
- Modifies Installed Components in the registry
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence