6181a8d4327593eb3b532d8d435d48a01ee562165f22a89001458b75008fce32 | Triage

Sharing

General

Target

6181a8d4327593eb3b532d8d435d48a01ee562165f22a89001458b75008fce32N
Size

148KB
Sample

240921-eqnvtsvaql
MD5

e17b93ab081d0405d807e4f3f47a84e0
SHA1

d34aad2430829be939a554949fb83ea034feacd2
SHA256

6181a8d4327593eb3b532d8d435d48a01ee562165f22a89001458b75008fce32
SHA512

a52374f700f44caf6e67937495121f6ac0e072e6c1e60712cca2a90ef0fff1954e33550b2a2853a6ff2df54494a88cbd52ddd9e30fd7d9de67e344910df84136
SSDEEP

1536:nrel3XWo2VxyMcCbncBVZWX5HzvCxGYCBbxTNyThXPU:rC3XWoixXDncBV4X5HzKxGYCzTNyTJU

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  6181a8d4327593eb3b532d8d435d48a01ee562165f22a89001458b75008fce32N
- Size
  
  148KB
- MD5
  
  e17b93ab081d0405d807e4f3f47a84e0
- SHA1
  
  d34aad2430829be939a554949fb83ea034feacd2
- SHA256
  
  6181a8d4327593eb3b532d8d435d48a01ee562165f22a89001458b75008fce32
- SHA512
  
  a52374f700f44caf6e67937495121f6ac0e072e6c1e60712cca2a90ef0fff1954e33550b2a2853a6ff2df54494a88cbd52ddd9e30fd7d9de67e344910df84136
- SSDEEP
  
  1536:nrel3XWo2VxyMcCbncBVZWX5HzvCxGYCBbxTNyThXPU:rC3XWoixXDncBV4X5HzKxGYCzTNyTJU
Score

10^/10

discovery evasion persistence
- Modifies WinLogon for persistence
  persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence