905e4af7e1331b5a8a74746b0d0ffef29b3c5f8680e3231ca2d7a8f2ffca0f2d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

905e4af7e1331b5a8a74746b0d0ffef29b3c5f8680e3231ca2d7a8f2ffca0f2dN
Size

135KB
Sample

241003-z46ysa1ajh
MD5

bc7ef5b8eaaf4358f31edaff575013b0
SHA1

7793b2ef56d9c165784dca35d3cf6e60273c546a
SHA256

905e4af7e1331b5a8a74746b0d0ffef29b3c5f8680e3231ca2d7a8f2ffca0f2d
SHA512

109828dbfe10a036a8f890233d6f7d1b99355bee42303b278b982f3dbfe35849395c985b9ac2932d4c52ae0411fd8c9b730cfe5480b0495e7e24749deaaa90b1
SSDEEP

1536:XfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbgxJ:XVqoCl/YgjxEufVU0TbTyDDalCJ

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  905e4af7e1331b5a8a74746b0d0ffef29b3c5f8680e3231ca2d7a8f2ffca0f2dN
- Size
  
  135KB
- MD5
  
  bc7ef5b8eaaf4358f31edaff575013b0
- SHA1
  
  7793b2ef56d9c165784dca35d3cf6e60273c546a
- SHA256
  
  905e4af7e1331b5a8a74746b0d0ffef29b3c5f8680e3231ca2d7a8f2ffca0f2d
- SHA512
  
  109828dbfe10a036a8f890233d6f7d1b99355bee42303b278b982f3dbfe35849395c985b9ac2932d4c52ae0411fd8c9b730cfe5480b0495e7e24749deaaa90b1
- SSDEEP
  
  1536:XfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbgxJ:XVqoCl/YgjxEufVU0TbTyDDalCJ
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence