debb15d92cc5eed64e48cbd40e276cc32ce2cb64b82dec24ccd6efb0a3177e77 | Triage

Sharing

General

Target

debb15d92cc5eed64e48cbd40e276cc32ce2cb64b82dec24ccd6efb0a3177e77N.exe
Size

215KB
Sample

241120-ffd4bawmaq
MD5

9df07e88bc889cf23713548c5b49cad0
SHA1

3bf488f72e9282b5183dec10249ad29749917984
SHA256

debb15d92cc5eed64e48cbd40e276cc32ce2cb64b82dec24ccd6efb0a3177e77
SHA512

49ffdf26ae0711f1a1f56aefa55a223b198cc46a60a14ecf01d80da18aa12b8dc4ee15a3dad64c4577bf4c3f088d3f6bf2d55ed2d3ba450906275c367af2aea3
SSDEEP

1536:JfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbJddu5QWXDp:JVqoCl/YgjxEufVU0TbTyDDalbduWWX1

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  debb15d92cc5eed64e48cbd40e276cc32ce2cb64b82dec24ccd6efb0a3177e77N.exe
- Size
  
  215KB
- MD5
  
  9df07e88bc889cf23713548c5b49cad0
- SHA1
  
  3bf488f72e9282b5183dec10249ad29749917984
- SHA256
  
  debb15d92cc5eed64e48cbd40e276cc32ce2cb64b82dec24ccd6efb0a3177e77
- SHA512
  
  49ffdf26ae0711f1a1f56aefa55a223b198cc46a60a14ecf01d80da18aa12b8dc4ee15a3dad64c4577bf4c3f088d3f6bf2d55ed2d3ba450906275c367af2aea3
- SSDEEP
  
  1536:JfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbJddu5QWXDp:JVqoCl/YgjxEufVU0TbTyDDalbduWWX1
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence