e4b1733f8e475472746c9d5e5981d6fbda984938a7af460ffd312a5cb0860bb3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c96ceb5e5479331fc290df0fab290f70N.exe
Size

143KB
Sample

240806-s8rw4axajd
MD5

c96ceb5e5479331fc290df0fab290f70
SHA1

9098c70a94d0cee2b021d7f6145dea6a39d4a20f
SHA256

e4b1733f8e475472746c9d5e5981d6fbda984938a7af460ffd312a5cb0860bb3
SHA512

8c21f15cbcbe9b5b7086d3b6f42b389c34bc32082575af3dbf92be64a105724aa976a1647f96846bdc4ca1293d1aeecfa6a7b3b578591b68a147c5bcf3eef096
SSDEEP

3072:3LVoDvPd+A4WhkhXDl+i1lApwH08TdTIIIIIIIIIIIIIIIIIIfIIIIyIIIITIIIu:ZopGGgbiwU8J6

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  c96ceb5e5479331fc290df0fab290f70N.exe
- Size
  
  143KB
- MD5
  
  c96ceb5e5479331fc290df0fab290f70
- SHA1
  
  9098c70a94d0cee2b021d7f6145dea6a39d4a20f
- SHA256
  
  e4b1733f8e475472746c9d5e5981d6fbda984938a7af460ffd312a5cb0860bb3
- SHA512
  
  8c21f15cbcbe9b5b7086d3b6f42b389c34bc32082575af3dbf92be64a105724aa976a1647f96846bdc4ca1293d1aeecfa6a7b3b578591b68a147c5bcf3eef096
- SSDEEP
  
  3072:3LVoDvPd+A4WhkhXDl+i1lApwH08TdTIIIIIIIIIIIIIIIIIIfIIIIyIIIITIIIu:ZopGGgbiwU8J6
Score

10^/10

discovery evasion persistence
- Modifies WinLogon for persistence
  persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Event Triggered Execution

Change Default File Association

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence