d8eda948ad6f407085922db3b2b5506aab37c82ef24640c7a085d269034e0616 | Triage

Sharing

General

Target

d8eda948ad6f407085922db3b2b5506aab37c82ef24640c7a085d269034e0616N
Size

135KB
Sample

240920-gtesfasarg
MD5

aeb7ac510c1b62d1e100da60e80bfe50
SHA1

0168886358aba4a0a060771f844bdafdf5535bda
SHA256

d8eda948ad6f407085922db3b2b5506aab37c82ef24640c7a085d269034e0616
SHA512

2f71721f65759fa96cce0f617ca4cf960ac88da046446756049a937f5e01938e1d2020216d6f6416fff7ac45cd74965ead083f6956996adb5c348b074029123d
SSDEEP

1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVQj:UVqoCl/YgjxEufVU0TbTyDDal2j

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  d8eda948ad6f407085922db3b2b5506aab37c82ef24640c7a085d269034e0616N
- Size
  
  135KB
- MD5
  
  aeb7ac510c1b62d1e100da60e80bfe50
- SHA1
  
  0168886358aba4a0a060771f844bdafdf5535bda
- SHA256
  
  d8eda948ad6f407085922db3b2b5506aab37c82ef24640c7a085d269034e0616
- SHA512
  
  2f71721f65759fa96cce0f617ca4cf960ac88da046446756049a937f5e01938e1d2020216d6f6416fff7ac45cd74965ead083f6956996adb5c348b074029123d
- SSDEEP
  
  1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVQj:UVqoCl/YgjxEufVU0TbTyDDal2j
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence