4abedfc82c0c36eff2a0a204c9489498d959baa91f5e15a52991adac75d6d64e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f77488f1d5b1ece97c2b1b18968f6d0N.exe
Size

204KB
Sample

240726-r6n7raxgqe
MD5

1f77488f1d5b1ece97c2b1b18968f6d0
SHA1

16b7b4213dbf9e92dcf08b841a70e2f7ce3c6abc
SHA256

4abedfc82c0c36eff2a0a204c9489498d959baa91f5e15a52991adac75d6d64e
SHA512

3467d8dc0fefe66bdd53bdc250b2ec6e20ae2235319fdd3b6278e43fa9ca3662a108ddbedd2cc994453ddd40540599e68b73617be0138480ea7d00521c6e8bc0
SSDEEP

3072:UVqoCl/YgjxEufVU0TbTyDDalYHEre7GjyCaFvcCSudO:UsLqdufVUNDaMPXzjdO

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  1f77488f1d5b1ece97c2b1b18968f6d0N.exe
- Size
  
  204KB
- MD5
  
  1f77488f1d5b1ece97c2b1b18968f6d0
- SHA1
  
  16b7b4213dbf9e92dcf08b841a70e2f7ce3c6abc
- SHA256
  
  4abedfc82c0c36eff2a0a204c9489498d959baa91f5e15a52991adac75d6d64e
- SHA512
  
  3467d8dc0fefe66bdd53bdc250b2ec6e20ae2235319fdd3b6278e43fa9ca3662a108ddbedd2cc994453ddd40540599e68b73617be0138480ea7d00521c6e8bc0
- SSDEEP
  
  3072:UVqoCl/YgjxEufVU0TbTyDDalYHEre7GjyCaFvcCSudO:UsLqdufVUNDaMPXzjdO
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence