b4c22ff638bcb371e0cc8d8a7080a68212fc4ce6e629b833793a648c9f14b6e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4c22ff638bcb371e0cc8d8a7080a68212fc4ce6e629b833793a648c9f14b6e4.exe
Size

81KB
Sample

241002-bxs7cazhnr
MD5

517d7c550b44e53ddd9ae366f1ae8e4d
SHA1

43d3a0b7aa06fc952864fa37dcdca96593a06cbc
SHA256

b4c22ff638bcb371e0cc8d8a7080a68212fc4ce6e629b833793a648c9f14b6e4
SHA512

4c172099abd2c4b983c43500f0323e0feb26288f6ca35c5f2c4a4574ffc8df322fee42049f68bdac4dc47ca55bdca7b0ac98f560b4af4b985c04b962555965a0
SSDEEP

1536:xoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaxPBJYYD7UxD2i:renkyfPAwiMq0RqRfbaxZJYYD7i

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  b4c22ff638bcb371e0cc8d8a7080a68212fc4ce6e629b833793a648c9f14b6e4.exe
- Size
  
  81KB
- MD5
  
  517d7c550b44e53ddd9ae366f1ae8e4d
- SHA1
  
  43d3a0b7aa06fc952864fa37dcdca96593a06cbc
- SHA256
  
  b4c22ff638bcb371e0cc8d8a7080a68212fc4ce6e629b833793a648c9f14b6e4
- SHA512
  
  4c172099abd2c4b983c43500f0323e0feb26288f6ca35c5f2c4a4574ffc8df322fee42049f68bdac4dc47ca55bdca7b0ac98f560b4af4b985c04b962555965a0
- SSDEEP
  
  1536:xoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaxPBJYYD7UxD2i:renkyfPAwiMq0RqRfbaxZJYYD7i
Score

8^/10

discovery persistence
- Manipulates Digital Signatures
  Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.
- Sets service image path in registry
  persistence
- Downloads MZ/PE file
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

SIP and Trust Provider Hijacking

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence