9d4f692b7e9b9655e1900d52f9477b5a71e29520be390b4eeede575f046af261 | Triage

Sharing

General

Target

9d4f692b7e9b9655e1900d52f9477b5a71e29520be390b4eeede575f046af261N
Size

178KB
Sample

241006-qagmcszbnc
MD5

08b1f8aec0de311805bb1f6321333c40
SHA1

579949260d73ea7d118196408dcff51dc07d4098
SHA256

9d4f692b7e9b9655e1900d52f9477b5a71e29520be390b4eeede575f046af261
SHA512

113f71560d66b7e7922e8b6a9fa8ffb0ae6696daa6b4f5cf2939fdb957e5e660bde7675fe6fe85b0550419e264214221df6aa4e34d0d6603535c9356e81c3cc8
SSDEEP

3072:UVqoCl/YgjxEufVU0TbTyDDalRmQ9yLrPgY34gv6nQt:UsLqdufVUNDayQ9WPgM6k

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  9d4f692b7e9b9655e1900d52f9477b5a71e29520be390b4eeede575f046af261N
- Size
  
  178KB
- MD5
  
  08b1f8aec0de311805bb1f6321333c40
- SHA1
  
  579949260d73ea7d118196408dcff51dc07d4098
- SHA256
  
  9d4f692b7e9b9655e1900d52f9477b5a71e29520be390b4eeede575f046af261
- SHA512
  
  113f71560d66b7e7922e8b6a9fa8ffb0ae6696daa6b4f5cf2939fdb957e5e660bde7675fe6fe85b0550419e264214221df6aa4e34d0d6603535c9356e81c3cc8
- SSDEEP
  
  3072:UVqoCl/YgjxEufVU0TbTyDDalRmQ9yLrPgY34gv6nQt:UsLqdufVUNDayQ9WPgM6k
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence