e5187504dbee97940410e574706c302496b94e073c1af6d2fb536e2f36453685 | Triage

Sharing

General

Target

d48e2bdf8cc1f96099c1c0fb91f3b380N
Size

135KB
Sample

240908-qlwweszhlb
MD5

d48e2bdf8cc1f96099c1c0fb91f3b380
SHA1

a411fed949a848db5742669fc27cc0ab23d4e140
SHA256

e5187504dbee97940410e574706c302496b94e073c1af6d2fb536e2f36453685
SHA512

46e3487a9aebbade9388eaa096d2e1111b62931df579d1e699c418f6e21a1fac955154d41c5e876c81a74f35ac7900d1a624071d293dc6fe5a464b38808f3d11
SSDEEP

1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVBYz:UVqoCl/YgjxEufVU0TbTyDDalsz

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  d48e2bdf8cc1f96099c1c0fb91f3b380N
- Size
  
  135KB
- MD5
  
  d48e2bdf8cc1f96099c1c0fb91f3b380
- SHA1
  
  a411fed949a848db5742669fc27cc0ab23d4e140
- SHA256
  
  e5187504dbee97940410e574706c302496b94e073c1af6d2fb536e2f36453685
- SHA512
  
  46e3487a9aebbade9388eaa096d2e1111b62931df579d1e699c418f6e21a1fac955154d41c5e876c81a74f35ac7900d1a624071d293dc6fe5a464b38808f3d11
- SSDEEP
  
  1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVBYz:UVqoCl/YgjxEufVU0TbTyDDalsz
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence