c816a7616c6629fa1b64d18a6252506e64b33e8b935ec84fb24399485a45ad3d | Triage

Sharing

General

Target

c816a7616c6629fa1b64d18a6252506e64b33e8b935ec84fb24399485a45ad3dN
Size

206KB
Sample

241003-19b62azdkl
MD5

8f01091bade8cb30e0c70da373094c00
SHA1

eb67bdf66ce5c8858577693a3599ae3a8b3395e9
SHA256

c816a7616c6629fa1b64d18a6252506e64b33e8b935ec84fb24399485a45ad3d
SHA512

252317db74c0ab78bfb043426dffa186c0096b9d44709004079bf0af142e32414f3f177fa1e2c6d248ac080bea3b203d60bf053c386f93b50c8b034d894756ac
SSDEEP

1536:GfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbJd3hzzzzzzzzzzzO:GVqoCl/YgjxEufVU0TbTyDDalb3M

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  c816a7616c6629fa1b64d18a6252506e64b33e8b935ec84fb24399485a45ad3dN
- Size
  
  206KB
- MD5
  
  8f01091bade8cb30e0c70da373094c00
- SHA1
  
  eb67bdf66ce5c8858577693a3599ae3a8b3395e9
- SHA256
  
  c816a7616c6629fa1b64d18a6252506e64b33e8b935ec84fb24399485a45ad3d
- SHA512
  
  252317db74c0ab78bfb043426dffa186c0096b9d44709004079bf0af142e32414f3f177fa1e2c6d248ac080bea3b203d60bf053c386f93b50c8b034d894756ac
- SSDEEP
  
  1536:GfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbJd3hzzzzzzzzzzzO:GVqoCl/YgjxEufVU0TbTyDDalb3M
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence