b4acfc95c79438771874dbe2b095739c7684809185b7981325c2467d4e5d8ee9 | Triage

Sharing

General

Target

hlhnlz0i.exe
Size

275.1MB
Sample

240805-p48ghazgjh
MD5

fcad7dee7fef4705683a2372b413a508
SHA1

193e51098721e3a1c0a707596b9cd97eeed61898
SHA256

b4acfc95c79438771874dbe2b095739c7684809185b7981325c2467d4e5d8ee9
SHA512

18b0b7c7ec55a8a9ef9c62db5fecb2f31dcbf4b32fdbfa6a745806fca04162f10c9359efcc5549e3eac48f692f4758b1f7867cd250d268a4ff45378bd49c9a7d
SSDEEP

6291456:tV9h6MfMbOymNHP7oMpCp2O0cppnZyrx6zTjSVnln/+tY0t5tIReoz:tV2MfMbiHzBGppnZe6zTjikY0t7Ueoz

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  hlhnlz0i.exe
- Size
  
  275.1MB
- MD5
  
  fcad7dee7fef4705683a2372b413a508
- SHA1
  
  193e51098721e3a1c0a707596b9cd97eeed61898
- SHA256
  
  b4acfc95c79438771874dbe2b095739c7684809185b7981325c2467d4e5d8ee9
- SHA512
  
  18b0b7c7ec55a8a9ef9c62db5fecb2f31dcbf4b32fdbfa6a745806fca04162f10c9359efcc5549e3eac48f692f4758b1f7867cd250d268a4ff45378bd49c9a7d
- SSDEEP
  
  6291456:tV9h6MfMbOymNHP7oMpCp2O0cppnZyrx6zTjSVnln/+tY0t5tIReoz:tV2MfMbiHzBGppnZe6zTjikY0t7Ueoz
Score

8^/10

discovery persistence
- Sets service image path in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Checks for any installed AV software in registry
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

Software Discovery

Security Software Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence