12c72e610b3c282375f754c5d9f747cf13ef3e6e33a0acb746f3f5f6819a04ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68e085c90d551008213cadee00ea85e0N.exe
Size

143KB
Sample

240807-fmryravfpa
MD5

68e085c90d551008213cadee00ea85e0
SHA1

ed1ddd1822f99658951b332ccdbf35b92d157a2f
SHA256

12c72e610b3c282375f754c5d9f747cf13ef3e6e33a0acb746f3f5f6819a04ca
SHA512

601bc4fc99878f1c2a2dc9944971c99b415a8b36fd8b8efaa9f3ab47ac51fda2b319af46df707d9f2b2355bd032c4a73b689862a48c60dcf7f8f9a03b07a82f2
SSDEEP

3072:3LVoDvPd+A4WhkhXDl+i1lApwH08TdTIIIIIIIIIIIIIIIIIIfIIIIyIIIITIIIP:ZopGGgbiwU8Jz

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  68e085c90d551008213cadee00ea85e0N.exe
- Size
  
  143KB
- MD5
  
  68e085c90d551008213cadee00ea85e0
- SHA1
  
  ed1ddd1822f99658951b332ccdbf35b92d157a2f
- SHA256
  
  12c72e610b3c282375f754c5d9f747cf13ef3e6e33a0acb746f3f5f6819a04ca
- SHA512
  
  601bc4fc99878f1c2a2dc9944971c99b415a8b36fd8b8efaa9f3ab47ac51fda2b319af46df707d9f2b2355bd032c4a73b689862a48c60dcf7f8f9a03b07a82f2
- SSDEEP
  
  3072:3LVoDvPd+A4WhkhXDl+i1lApwH08TdTIIIIIIIIIIIIIIIIIIfIIIIyIIIITIIIP:ZopGGgbiwU8Jz
Score

10^/10

discovery evasion persistence
- Modifies WinLogon for persistence
  persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Event Triggered Execution

Change Default File Association

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence