ef7dccb6e33fb9d360bd9be4b0acd28d54d2988fd16a0ce42ab2b4aa844bdbc9 | Triage

Sharing

General

Target

ef7dccb6e33fb9d360bd9be4b0acd28d54d2988fd16a0ce42ab2b4aa844bdbc9
Size

122KB
Sample

240919-dr4f8sxhph
MD5

8cff9c7979f43c7c1f97664ea1afd836
SHA1

5a366d4fde27504ae71d1a64527ffc016448b89c
SHA256

ef7dccb6e33fb9d360bd9be4b0acd28d54d2988fd16a0ce42ab2b4aa844bdbc9
SHA512

0e905236cabbb3830ceb909b44a3fdaf59a39e37cbb088b7dc92c7b2d59363660165c7d579cfbfdfa8b7c8d5d187569e69dc147e3f3d28f50387f96ccfff4948
SSDEEP

1536:niyzlrXCu2lsuAoeQZZ86ukpj0nGGF9v+4Dvo:iyZCu2lhA1QZZ4kp4F9Xzo

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  ef7dccb6e33fb9d360bd9be4b0acd28d54d2988fd16a0ce42ab2b4aa844bdbc9
- Size
  
  122KB
- MD5
  
  8cff9c7979f43c7c1f97664ea1afd836
- SHA1
  
  5a366d4fde27504ae71d1a64527ffc016448b89c
- SHA256
  
  ef7dccb6e33fb9d360bd9be4b0acd28d54d2988fd16a0ce42ab2b4aa844bdbc9
- SHA512
  
  0e905236cabbb3830ceb909b44a3fdaf59a39e37cbb088b7dc92c7b2d59363660165c7d579cfbfdfa8b7c8d5d187569e69dc147e3f3d28f50387f96ccfff4948
- SSDEEP
  
  1536:niyzlrXCu2lsuAoeQZZ86ukpj0nGGF9v+4Dvo:iyZCu2lhA1QZZ4kp4F9Xzo
Score

10^/10

discovery evasion persistence
- Modifies WinLogon for persistence
  persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence