1fbd5101492ab9a490ccf0f925c0e672858a6ff31aeba78c217481366ef62a2a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e351668d68d45749607c1a6cfb1de480N
Size

67KB
Sample

240912-jyf76syfpk
MD5

e351668d68d45749607c1a6cfb1de480
SHA1

5c5419d549d690406ea5a8f3791d0927db999584
SHA256

1fbd5101492ab9a490ccf0f925c0e672858a6ff31aeba78c217481366ef62a2a
SHA512

4be86887e25f9f7811c819f1b61f61109fd9c3cffc453b0eb4cb04514bab4aa834103a8bcc28ae5c79d28fbaeec46419302fb116f99aee5ca1d64360be4dcae6
SSDEEP

1536:EgXsfgWQN1kYsRxWTg3PwSWe991Rdolpdz6JAkAT:1tWYfGATvPe9slp+ApT

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  e351668d68d45749607c1a6cfb1de480N
- Size
  
  67KB
- MD5
  
  e351668d68d45749607c1a6cfb1de480
- SHA1
  
  5c5419d549d690406ea5a8f3791d0927db999584
- SHA256
  
  1fbd5101492ab9a490ccf0f925c0e672858a6ff31aeba78c217481366ef62a2a
- SHA512
  
  4be86887e25f9f7811c819f1b61f61109fd9c3cffc453b0eb4cb04514bab4aa834103a8bcc28ae5c79d28fbaeec46419302fb116f99aee5ca1d64360be4dcae6
- SSDEEP
  
  1536:EgXsfgWQN1kYsRxWTg3PwSWe991Rdolpdz6JAkAT:1tWYfGATvPe9slp+ApT
Score

10^/10

discovery evasion persistence
- Modifies WinLogon for persistence
  persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence