50806d0319dea4fa4fe4b083f8a49cda90ea0849455471283c72bac94cd2d78c | Triage

Sharing

General

Target

50806d0319dea4fa4fe4b083f8a49cda90ea0849455471283c72bac94cd2d78c
Size

78KB
Sample

240604-1clzzach38
MD5

a0085f9746c0487a76698bf2ac37d4b0
SHA1

a3e14474c0753830ab0f727a2f5de5c5e1e93624
SHA256

50806d0319dea4fa4fe4b083f8a49cda90ea0849455471283c72bac94cd2d78c
SHA512

d1546aa4ac41e2ca84e6ce56e0a021791105b537b737438f616e787856dfbd5ff527ea874633f4ee58717501ee79bccc32fb51085e292465d97aacac61592f6b
SSDEEP

768:RpQNwC3BEddsEqOt/hyJF+x3BEJwRrPHisKl4qhq:7eTce/U/hKYuKPHisKldhq

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  50806d0319dea4fa4fe4b083f8a49cda90ea0849455471283c72bac94cd2d78c
- Size
  
  78KB
- MD5
  
  a0085f9746c0487a76698bf2ac37d4b0
- SHA1
  
  a3e14474c0753830ab0f727a2f5de5c5e1e93624
- SHA256
  
  50806d0319dea4fa4fe4b083f8a49cda90ea0849455471283c72bac94cd2d78c
- SHA512
  
  d1546aa4ac41e2ca84e6ce56e0a021791105b537b737438f616e787856dfbd5ff527ea874633f4ee58717501ee79bccc32fb51085e292465d97aacac61592f6b
- SSDEEP
  
  768:RpQNwC3BEddsEqOt/hyJF+x3BEJwRrPHisKl4qhq:7eTce/U/hKYuKPHisKldhq
Score

10^/10

evasion persistence
- Modifies visibility of file extensions in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2