1be157cb50aad7c7701f0452c1cee83af1f92829ac626e269eb48bdb366dc2cf | Triage

Sharing

General

Target

e22c5225bf67acd487a752c4a3a96a00N
Size

135KB
Sample

240826-c7xg7azgnc
MD5

e22c5225bf67acd487a752c4a3a96a00
SHA1

98bcfae35beb6f257d5ca8d7e3ee1904249032fc
SHA256

1be157cb50aad7c7701f0452c1cee83af1f92829ac626e269eb48bdb366dc2cf
SHA512

ff6528e60c978b4fba34b69f14a366b216eaf8c5e210b9d7651071538daf935256f97c23cf9ab4b3e23dc3369679fc23a3e2f60df3b9b235173f06edb13fd1e3
SSDEEP

1536:XfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbgft:XVqoCl/YgjxEufVU0TbTyDDalkt

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  e22c5225bf67acd487a752c4a3a96a00N
- Size
  
  135KB
- MD5
  
  e22c5225bf67acd487a752c4a3a96a00
- SHA1
  
  98bcfae35beb6f257d5ca8d7e3ee1904249032fc
- SHA256
  
  1be157cb50aad7c7701f0452c1cee83af1f92829ac626e269eb48bdb366dc2cf
- SHA512
  
  ff6528e60c978b4fba34b69f14a366b216eaf8c5e210b9d7651071538daf935256f97c23cf9ab4b3e23dc3369679fc23a3e2f60df3b9b235173f06edb13fd1e3
- SSDEEP
  
  1536:XfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbgft:XVqoCl/YgjxEufVU0TbTyDDalkt
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence