7c8ff2675b38565cb688ddb657b5cbf1469eb0f0b56625b2e6183e1507723195 | Triage

Sharing

General

Target

bafc7a9c8f4261fb83d9c5c2e45f20c7
Size

405KB
Sample

240308-l5bblsdc6x
MD5

bafc7a9c8f4261fb83d9c5c2e45f20c7
SHA1

96e4907948a9934c5c0ee6d48e6965682fd181f3
SHA256

7c8ff2675b38565cb688ddb657b5cbf1469eb0f0b56625b2e6183e1507723195
SHA512

0e2bb905954ac216464ed90272544e6a9989fe6cdf71c338b7793b71320bcf0970bab176672fe8ebbed2965c0864e9537d45d76f60ef8e04d7df8405ba0ed42f
SSDEEP

6144:1BmCr/JPiSFvbfCw5tg8b+IpxpLW/VpCuLkkri6+hZIuJXQ1PiAI4ess:DrRPiSpCSBb+M9cpRLkHhZJFQ1Pi2e

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  bafc7a9c8f4261fb83d9c5c2e45f20c7
- Size
  
  405KB
- MD5
  
  bafc7a9c8f4261fb83d9c5c2e45f20c7
- SHA1
  
  96e4907948a9934c5c0ee6d48e6965682fd181f3
- SHA256
  
  7c8ff2675b38565cb688ddb657b5cbf1469eb0f0b56625b2e6183e1507723195
- SHA512
  
  0e2bb905954ac216464ed90272544e6a9989fe6cdf71c338b7793b71320bcf0970bab176672fe8ebbed2965c0864e9537d45d76f60ef8e04d7df8405ba0ed42f
- SSDEEP
  
  6144:1BmCr/JPiSFvbfCw5tg8b+IpxpLW/VpCuLkkri6+hZIuJXQ1PiAI4ess:DrRPiSpCSBb+M9cpRLkHhZJFQ1Pi2e
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2