d76f13f9c96d975726d7753daca79dd08bb0644082705d90ed8b52dcabbe6f67 | Triage

Sharing

General

Target

d76f13f9c96d975726d7753daca79dd08bb0644082705d90ed8b52dcabbe6f67N
Size

81KB
Sample

241004-ezx5vsthjr
MD5

1c6c939a0f9dc785a99080a60d049c70
SHA1

a7ab4bdb9786c31b7e31ffb45d361837f7cc0aa2
SHA256

d76f13f9c96d975726d7753daca79dd08bb0644082705d90ed8b52dcabbe6f67
SHA512

dc8f14d00a4fc77d095833c46fe2c0618d6f88445e3c375f140d34fa8119a098061c65bb3d443d6a4c9f223be909567437952c8a6a4c52b5c77f8b52fcc3b04f
SSDEEP

1536:RoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaJPBJYYf7AuxI:LenkyfPAwiMq0RqRfbaJZJYYfkT

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  d76f13f9c96d975726d7753daca79dd08bb0644082705d90ed8b52dcabbe6f67N
- Size
  
  81KB
- MD5
  
  1c6c939a0f9dc785a99080a60d049c70
- SHA1
  
  a7ab4bdb9786c31b7e31ffb45d361837f7cc0aa2
- SHA256
  
  d76f13f9c96d975726d7753daca79dd08bb0644082705d90ed8b52dcabbe6f67
- SHA512
  
  dc8f14d00a4fc77d095833c46fe2c0618d6f88445e3c375f140d34fa8119a098061c65bb3d443d6a4c9f223be909567437952c8a6a4c52b5c77f8b52fcc3b04f
- SSDEEP
  
  1536:RoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaJPBJYYf7AuxI:LenkyfPAwiMq0RqRfbaJZJYYfkT
Score

8^/10

discovery persistence
- Manipulates Digital Signatures
  Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.
- Sets service image path in registry
  persistence
- Downloads MZ/PE file
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

SIP and Trust Provider Hijacking

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence