351565b5605e02bbc53b6b299c1e3eae5eb6340f9d6582674600cc561a16eb36 | Triage

Sharing

General

Target

351565b5605e02bbc53b6b299c1e3eae5eb6340f9d6582674600cc561a16eb36
Size

67KB
Sample

241120-1lkhhavcnp
MD5

4851fb73dd894ee82629bc373f8697b3
SHA1

93599608bfe3fdf39b98d854a307b927ef59b5ff
SHA256

351565b5605e02bbc53b6b299c1e3eae5eb6340f9d6582674600cc561a16eb36
SHA512

c672f1b2f84ad26a7ba27b59b741e15e476588cc09ac711b4b5c280c567150a1c8de3854903d29da80000918d5831598d1a7fcab565748bfa611b0eb7886ee2e
SSDEEP

1536:EgXsfgWQN1kYsRxWTg3PwSWe991Rdolpdz6JAkA4lllllllllllllllllllllllp:1tWYfGATvPe9slp+ApK

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  351565b5605e02bbc53b6b299c1e3eae5eb6340f9d6582674600cc561a16eb36
- Size
  
  67KB
- MD5
  
  4851fb73dd894ee82629bc373f8697b3
- SHA1
  
  93599608bfe3fdf39b98d854a307b927ef59b5ff
- SHA256
  
  351565b5605e02bbc53b6b299c1e3eae5eb6340f9d6582674600cc561a16eb36
- SHA512
  
  c672f1b2f84ad26a7ba27b59b741e15e476588cc09ac711b4b5c280c567150a1c8de3854903d29da80000918d5831598d1a7fcab565748bfa611b0eb7886ee2e
- SSDEEP
  
  1536:EgXsfgWQN1kYsRxWTg3PwSWe991Rdolpdz6JAkA4lllllllllllllllllllllllp:1tWYfGATvPe9slp+ApK
Score

10^/10

discovery evasion persistence
- Modifies WinLogon for persistence
  persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence