e7239cf4c1ad58e01b43ad7b208b8e5023ddb84ca774cf2e7ad9fbb421cf6384 | Triage

Sharing

General

Target

476882ab641cf3f57e914868b7f5d500N.exe
Size

207KB
Sample

240823-vvnnmazbrk
MD5

476882ab641cf3f57e914868b7f5d500
SHA1

2ca2bbc515f0d23440d2ae0b445fbc95af7b90b5
SHA256

e7239cf4c1ad58e01b43ad7b208b8e5023ddb84ca774cf2e7ad9fbb421cf6384
SHA512

902a8ad2905574fe5e75f1a4666175eef635f912c6878aa02a8d5b0869b98fba0d4d07b8fe6b1c97d074371458e1186486f60d9ec2a0fa50f740bafa61f75145
SSDEEP

1536:/fsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbJdo:/VqoCl/YgjxEufVU0TbTyDDalbo

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  476882ab641cf3f57e914868b7f5d500N.exe
- Size
  
  207KB
- MD5
  
  476882ab641cf3f57e914868b7f5d500
- SHA1
  
  2ca2bbc515f0d23440d2ae0b445fbc95af7b90b5
- SHA256
  
  e7239cf4c1ad58e01b43ad7b208b8e5023ddb84ca774cf2e7ad9fbb421cf6384
- SHA512
  
  902a8ad2905574fe5e75f1a4666175eef635f912c6878aa02a8d5b0869b98fba0d4d07b8fe6b1c97d074371458e1186486f60d9ec2a0fa50f740bafa61f75145
- SSDEEP
  
  1536:/fsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbJdo:/VqoCl/YgjxEufVU0TbTyDDalbo
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence