f7afac39d2754ac953bf129ee094c8b092e349cdf35f1ba23c2c76a0229f9e96 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7afac39d2754ac953bf129ee094c8b092e349cdf35f1ba23c2c76a0229f9e96
Size

96KB
Sample

240614-ag68la1bln
MD5

8677376c509f0c66d1f02c6b66d7ef90
SHA1

e057eddf9d2e319967e200a5801e4bbe6e45862a
SHA256

f7afac39d2754ac953bf129ee094c8b092e349cdf35f1ba23c2c76a0229f9e96
SHA512

e0c685e289c10a48b5fa251aa4414653c103dac69faf536b9ae9598e066aab5a03b03c09096c42a0f244aeaf80f2b9e4aa28d6b28da436587a3f52a9155473d0
SSDEEP

1536:xcUkaFWP1/og2gnKHNk9DsMvWhuZMTz2PdA24LhtpgcIPfuaNZ:xchd1/NKU1u+A0fuQ

Score

8^/10

execution persistence

Malware Config

Targets

- Target
  
  f7afac39d2754ac953bf129ee094c8b092e349cdf35f1ba23c2c76a0229f9e96
- Size
  
  96KB
- MD5
  
  8677376c509f0c66d1f02c6b66d7ef90
- SHA1
  
  e057eddf9d2e319967e200a5801e4bbe6e45862a
- SHA256
  
  f7afac39d2754ac953bf129ee094c8b092e349cdf35f1ba23c2c76a0229f9e96
- SHA512
  
  e0c685e289c10a48b5fa251aa4414653c103dac69faf536b9ae9598e066aab5a03b03c09096c42a0f244aeaf80f2b9e4aa28d6b28da436587a3f52a9155473d0
- SSDEEP
  
  1536:xcUkaFWP1/og2gnKHNk9DsMvWhuZMTz2PdA24LhtpgcIPfuaNZ:xchd1/NKU1u+A0fuQ
Score

8^/10

execution persistence
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Creates new service(s)
  persistence execution
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

executionpersistence