f916bbf01d64d41a01427aae6db4b66c7533a31d9317c02d1bca90814627778c | Triage

Sharing

General

Target

f916bbf01d64d41a01427aae6db4b66c7533a31d9317c02d1bca90814627778c
Size

121KB
Sample

240425-f31wlagb4w
MD5

ef46b2a0b62c0d32c5d0a93e89afc02a
SHA1

675e9583128ff9d43034baf0952c52402edcf6d1
SHA256

f916bbf01d64d41a01427aae6db4b66c7533a31d9317c02d1bca90814627778c
SHA512

cf359456fdc87bc1685350d7af195bf96241747f7115bbf18430bb74ead11e2348097ba19382bd831de09461d2e9e54417b571554fb818b4dd80ba6423158400
SSDEEP

1536:9X9TaOt5OuXpBFZQUSvnsk+z/ypuOASsIc9XmkbxH3u:9X9TP3OuXpBkAz/yjvc9X/9Xu

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  f916bbf01d64d41a01427aae6db4b66c7533a31d9317c02d1bca90814627778c
- Size
  
  121KB
- MD5
  
  ef46b2a0b62c0d32c5d0a93e89afc02a
- SHA1
  
  675e9583128ff9d43034baf0952c52402edcf6d1
- SHA256
  
  f916bbf01d64d41a01427aae6db4b66c7533a31d9317c02d1bca90814627778c
- SHA512
  
  cf359456fdc87bc1685350d7af195bf96241747f7115bbf18430bb74ead11e2348097ba19382bd831de09461d2e9e54417b571554fb818b4dd80ba6423158400
- SSDEEP
  
  1536:9X9TaOt5OuXpBFZQUSvnsk+z/ypuOASsIc9XmkbxH3u:9X9TP3OuXpBkAz/yjvc9X/9Xu
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence