d411b09bf79d41e6ae01c2cddcac478d154ac5baaa0ace2802c52db656b62910 | Triage

Sharing

General

Target

d411b09bf79d41e6ae01c2cddcac478d154ac5baaa0ace2802c52db656b62910N
Size

135KB
Sample

240920-kb1tqsxfjq
MD5

39e17c31b535f5a7425fbd51750f6bd0
SHA1

52b2d936f2cceaeb387ecc3d2d8f1d7044b587fd
SHA256

d411b09bf79d41e6ae01c2cddcac478d154ac5baaa0ace2802c52db656b62910
SHA512

61dfa7192cbf6aa9ab245c8cb450d276c7f0318669a9f96fc88babf523c2362b8b935fd4a331e522111258daaa31fa6cfa9153fd1ff946ccbfc47d50e151cec4
SSDEEP

1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVElWAo:UVqoCl/YgjxEufVU0TbTyDDalqlWAo

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  d411b09bf79d41e6ae01c2cddcac478d154ac5baaa0ace2802c52db656b62910N
- Size
  
  135KB
- MD5
  
  39e17c31b535f5a7425fbd51750f6bd0
- SHA1
  
  52b2d936f2cceaeb387ecc3d2d8f1d7044b587fd
- SHA256
  
  d411b09bf79d41e6ae01c2cddcac478d154ac5baaa0ace2802c52db656b62910
- SHA512
  
  61dfa7192cbf6aa9ab245c8cb450d276c7f0318669a9f96fc88babf523c2362b8b935fd4a331e522111258daaa31fa6cfa9153fd1ff946ccbfc47d50e151cec4
- SSDEEP
  
  1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVElWAo:UVqoCl/YgjxEufVU0TbTyDDalqlWAo
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence