4f7ae903aeebcaf7f4c7da23a7856647122804922a8c50adf8c6e528d29fd20c | Triage

Sharing

General

Target

4f7ae903aeebcaf7f4c7da23a7856647122804922a8c50adf8c6e528d29fd20c
Size

135KB
Sample

241120-2q5vnsvngs
MD5

88523c116bf58aaf5019cd52e007216f
SHA1

3e7434a331d28f30c23db36718e6cab8ba63b447
SHA256

4f7ae903aeebcaf7f4c7da23a7856647122804922a8c50adf8c6e528d29fd20c
SHA512

ec1b942a4112ffaffb173d6c7489149d087810239f22ee08598315a9bfa06730e231c4f7c9570384a54f66f753c87067e70325d14fc618c287196f92a8011ec4
SSDEEP

1536:4fsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVuHzXIAAAAAAAAA1:4VqoCl/YgjxEufVU0TbTyDDalcHzXx

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  4f7ae903aeebcaf7f4c7da23a7856647122804922a8c50adf8c6e528d29fd20c
- Size
  
  135KB
- MD5
  
  88523c116bf58aaf5019cd52e007216f
- SHA1
  
  3e7434a331d28f30c23db36718e6cab8ba63b447
- SHA256
  
  4f7ae903aeebcaf7f4c7da23a7856647122804922a8c50adf8c6e528d29fd20c
- SHA512
  
  ec1b942a4112ffaffb173d6c7489149d087810239f22ee08598315a9bfa06730e231c4f7c9570384a54f66f753c87067e70325d14fc618c287196f92a8011ec4
- SSDEEP
  
  1536:4fsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVuHzXIAAAAAAAAA1:4VqoCl/YgjxEufVU0TbTyDDalcHzXx
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence