5ec15f5f6fe64d7dcdaf5ac5efa5c34d4ec565485b41e3e6db6b2979b5ed642c | Triage

Sharing

General

Target

5ec15f5f6fe64d7dcdaf5ac5efa5c34d4ec565485b41e3e6db6b2979b5ed642c
Size

135KB
Sample

241120-3b4jqswfjn
MD5

17b0b82c62c97a1615bff55c490a19ed
SHA1

247800f9ef5d5a3b884cf1f16166ab337657073c
SHA256

5ec15f5f6fe64d7dcdaf5ac5efa5c34d4ec565485b41e3e6db6b2979b5ed642c
SHA512

992f5bdd97681f21804e908bec40a0c7a5c34a69a0eef4d3cbf88c041aaf5222258c247a4ac3fc9aed2ec7ad1728a290f8689609badeab68d57584d3d3edc9dc
SSDEEP

1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVwdz88888888888x:UVqoCl/YgjxEufVU0TbTyDDalWd+

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  5ec15f5f6fe64d7dcdaf5ac5efa5c34d4ec565485b41e3e6db6b2979b5ed642c
- Size
  
  135KB
- MD5
  
  17b0b82c62c97a1615bff55c490a19ed
- SHA1
  
  247800f9ef5d5a3b884cf1f16166ab337657073c
- SHA256
  
  5ec15f5f6fe64d7dcdaf5ac5efa5c34d4ec565485b41e3e6db6b2979b5ed642c
- SHA512
  
  992f5bdd97681f21804e908bec40a0c7a5c34a69a0eef4d3cbf88c041aaf5222258c247a4ac3fc9aed2ec7ad1728a290f8689609badeab68d57584d3d3edc9dc
- SSDEEP
  
  1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVwdz88888888888x:UVqoCl/YgjxEufVU0TbTyDDalWd+
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence