a1acbfdb969b2bcae7cee1f6baeb93a66e795cf14afe34afcd74f4d3ab4fd276 | Triage

Sharing

General

Target

a1acbfdb969b2bcae7cee1f6baeb93a66e795cf14afe34afcd74f4d3ab4fd276.exe
Size

133KB
Sample

241120-dqfzjsyhna
MD5

5509d072e2aaf44677987a8cfadb566d
SHA1

7fd9b8acc4d9add055e034b3ad4781bcd1ec0253
SHA256

a1acbfdb969b2bcae7cee1f6baeb93a66e795cf14afe34afcd74f4d3ab4fd276
SHA512

500befe2072c831dcb55ae63ed3d4aaa6de4b3a51b10cba781898acaa60421e4a827593d952ca3d50b61eea01b763457347cfb9e9e2f4225ab3fae045ebc4cdc
SSDEEP

3072:3LVoDvPd+A4WhkhXDl+i1lApwH08TdpIIIIIIIIIIIIIIIII/IIIIIIIIIIIIIIR:ZopGGgbiwU8Je

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  a1acbfdb969b2bcae7cee1f6baeb93a66e795cf14afe34afcd74f4d3ab4fd276.exe
- Size
  
  133KB
- MD5
  
  5509d072e2aaf44677987a8cfadb566d
- SHA1
  
  7fd9b8acc4d9add055e034b3ad4781bcd1ec0253
- SHA256
  
  a1acbfdb969b2bcae7cee1f6baeb93a66e795cf14afe34afcd74f4d3ab4fd276
- SHA512
  
  500befe2072c831dcb55ae63ed3d4aaa6de4b3a51b10cba781898acaa60421e4a827593d952ca3d50b61eea01b763457347cfb9e9e2f4225ab3fae045ebc4cdc
- SSDEEP
  
  3072:3LVoDvPd+A4WhkhXDl+i1lApwH08TdpIIIIIIIIIIIIIIIII/IIIIIIIIIIIIIIR:ZopGGgbiwU8Je
Score

10^/10

discovery evasion persistence
- Modifies WinLogon for persistence
  persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Event Triggered Execution

Change Default File Association

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence