3aae5850c950cb1c5b1630d445d577d3ea54089129a973d9fa024ac18e60e7e3 | Triage

Sharing

General

Target

c450780fdb995cfac3252fdb4f02a4c9
Size

20KB
Sample

240312-2t3vgsfa85
MD5

c450780fdb995cfac3252fdb4f02a4c9
SHA1

d739517e4461d8db970baba2871e56cf55b9099f
SHA256

3aae5850c950cb1c5b1630d445d577d3ea54089129a973d9fa024ac18e60e7e3
SHA512

240bb058436394e06b6627b452405577d4da4b826ccefefd810abb92142b4d7210809719d710b72e4afcac33fcd532f1bab16017c5977e16e1450265ab664235
SSDEEP

384:hPyZNjtU2mXQp8D0bDARQROC1Q1JjbjpjghULzxsaQaXT:5yZ+BM6ujK1xvlsUHxsaQaj

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  c450780fdb995cfac3252fdb4f02a4c9
- Size
  
  20KB
- MD5
  
  c450780fdb995cfac3252fdb4f02a4c9
- SHA1
  
  d739517e4461d8db970baba2871e56cf55b9099f
- SHA256
  
  3aae5850c950cb1c5b1630d445d577d3ea54089129a973d9fa024ac18e60e7e3
- SHA512
  
  240bb058436394e06b6627b452405577d4da4b826ccefefd810abb92142b4d7210809719d710b72e4afcac33fcd532f1bab16017c5977e16e1450265ab664235
- SSDEEP
  
  384:hPyZNjtU2mXQp8D0bDARQROC1Q1JjbjpjghULzxsaQaXT:5yZ+BM6ujK1xvlsUHxsaQaj
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies AppInit DLL entries
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence