2de90b576dfc8507e91daa4870ad4e26e15acd779c9eee8e1849e5e78db46897 | Triage

Sharing

General

Target

2de90b576dfc8507e91daa4870ad4e26e15acd779c9eee8e1849e5e78db46897N
Size

460KB
Sample

240920-bm1tfa1dqa
MD5

e2e9af35b9ce5c2f861ac3e79c2a42d0
SHA1

5ff7de0d33c7c954451901a3198088ee9807f0d7
SHA256

2de90b576dfc8507e91daa4870ad4e26e15acd779c9eee8e1849e5e78db46897
SHA512

8e0562191081bf680128e9cb23f95517f42f59526652a4f866a0482bf9cd38e35b8d48cb2ddb8757fd717531aa791977f3e334c63201f31e71b1931609c69447
SSDEEP

12288:HrRPiSpCSBb+M9cpRLkHhZJffbhzeo35c:L4Spniscpi3Bh3c

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  2de90b576dfc8507e91daa4870ad4e26e15acd779c9eee8e1849e5e78db46897N
- Size
  
  460KB
- MD5
  
  e2e9af35b9ce5c2f861ac3e79c2a42d0
- SHA1
  
  5ff7de0d33c7c954451901a3198088ee9807f0d7
- SHA256
  
  2de90b576dfc8507e91daa4870ad4e26e15acd779c9eee8e1849e5e78db46897
- SHA512
  
  8e0562191081bf680128e9cb23f95517f42f59526652a4f866a0482bf9cd38e35b8d48cb2ddb8757fd717531aa791977f3e334c63201f31e71b1931609c69447
- SSDEEP
  
  12288:HrRPiSpCSBb+M9cpRLkHhZJffbhzeo35c:L4Spniscpi3Bh3c
Score

10^/10

discovery evasion persistence
- Modifies firewall policy service
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoverypersistence