093a36fef785c3b734dfe8fee8cf89402506c2ac8c0abc96d222378a95c3cecf | Triage

Sharing

General

Target

23c1e702885d54fa099eb81f1d75f820N.exe
Size

184KB
Sample

240901-cmmr9ayfqg
MD5

23c1e702885d54fa099eb81f1d75f820
SHA1

a2e6dd53863f6a309a42b1d9af7ec61f89ccf8af
SHA256

093a36fef785c3b734dfe8fee8cf89402506c2ac8c0abc96d222378a95c3cecf
SHA512

8cc9ff6aa5f256828e8e2d338bbe42b8e1533897324725b0349531d217285971c39f4595fcd77237bc3406b37711e8f9c418bfae07ee7adf92bf0dbbe35469c2
SSDEEP

3072:FWkWRM0We9kVF3GezUroWlBCtCmCdXC1D1NGW1u:FWkWXV9wUezUroW+tCmCCfNGZ

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  23c1e702885d54fa099eb81f1d75f820N.exe
- Size
  
  184KB
- MD5
  
  23c1e702885d54fa099eb81f1d75f820
- SHA1
  
  a2e6dd53863f6a309a42b1d9af7ec61f89ccf8af
- SHA256
  
  093a36fef785c3b734dfe8fee8cf89402506c2ac8c0abc96d222378a95c3cecf
- SHA512
  
  8cc9ff6aa5f256828e8e2d338bbe42b8e1533897324725b0349531d217285971c39f4595fcd77237bc3406b37711e8f9c418bfae07ee7adf92bf0dbbe35469c2
- SSDEEP
  
  3072:FWkWRM0We9kVF3GezUroWlBCtCmCdXC1D1NGW1u:FWkWXV9wUezUroW+tCmCCfNGZ
Score

10^/10

discovery evasion persistence
- Modifies WinLogon for persistence
  persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence