6a30810dc8ae315809e27f0f9386dc3a584a19f9ad153d2b20bd7a62cd78b1ff | Triage

Sharing

General

Target

6a30810dc8ae315809e27f0f9386dc3a584a19f9ad153d2b20bd7a62cd78b1ffN
Size

23KB
Sample

241018-hawghsvfnl
MD5

69797b70ea45564d9c80133ccc677330
SHA1

73194f62b792bec557c5f5a491739a98613ed82f
SHA256

6a30810dc8ae315809e27f0f9386dc3a584a19f9ad153d2b20bd7a62cd78b1ff
SHA512

3b28be98796b31a748a76d218d3a9cbc4dfc404ce01b540b2b9f2e1123bf7b78c22afec5cb9e77682a9e8e3be2dc8d56e1272f8425b629236bb79394801fd605
SSDEEP

384:uSdD9d6GoOi45Lgx2LqRA0hV/YMnQG79j6ORhbxEj8zEZSY9Bdd:vGigU/O9jfRhbQ8EZSW

Score

10^/10

discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  6a30810dc8ae315809e27f0f9386dc3a584a19f9ad153d2b20bd7a62cd78b1ffN
- Size
  
  23KB
- MD5
  
  69797b70ea45564d9c80133ccc677330
- SHA1
  
  73194f62b792bec557c5f5a491739a98613ed82f
- SHA256
  
  6a30810dc8ae315809e27f0f9386dc3a584a19f9ad153d2b20bd7a62cd78b1ff
- SHA512
  
  3b28be98796b31a748a76d218d3a9cbc4dfc404ce01b540b2b9f2e1123bf7b78c22afec5cb9e77682a9e8e3be2dc8d56e1272f8425b629236bb79394801fd605
- SSDEEP
  
  384:uSdD9d6GoOi45Lgx2LqRA0hV/YMnQG79j6ORhbxEj8zEZSY9Bdd:vGigU/O9jfRhbQ8EZSW
Score

10^/10

discovery evasion persistence privilege_escalation
- Modifies firewall policy service
  evasion
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

AppInit DLLs

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalation

behavioral2

discoveryevasionpersistenceprivilege_escalation