2a1274a40d58767f3caabf866c034d00fa8c764c5aac8a11b15b8712f51fa32f | Triage

Sharing

General

Target

2a1274a40d58767f3caabf866c034d00fa8c764c5aac8a11b15b8712f51fa32f
Size

206KB
Sample

241120-z4mj5syjam
MD5

28458738ba1c9a40fc2a2d52ed94ea6d
SHA1

2cee0297a1575c9b149fb94d9082abe084266983
SHA256

2a1274a40d58767f3caabf866c034d00fa8c764c5aac8a11b15b8712f51fa32f
SHA512

a903141ab0d994c02a3e822c95a12eef01bfcdbacf21c8e43e766145f5d14366c622f924ab6d8fb8597caccb5d3b5db35daf873f1c1d4483cd2efd91f57f686e
SSDEEP

3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6un1:zvEN2U+T6i5LirrllHy4HUcMQY6i

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  2a1274a40d58767f3caabf866c034d00fa8c764c5aac8a11b15b8712f51fa32f
- Size
  
  206KB
- MD5
  
  28458738ba1c9a40fc2a2d52ed94ea6d
- SHA1
  
  2cee0297a1575c9b149fb94d9082abe084266983
- SHA256
  
  2a1274a40d58767f3caabf866c034d00fa8c764c5aac8a11b15b8712f51fa32f
- SHA512
  
  a903141ab0d994c02a3e822c95a12eef01bfcdbacf21c8e43e766145f5d14366c622f924ab6d8fb8597caccb5d3b5db35daf873f1c1d4483cd2efd91f57f686e
- SSDEEP
  
  3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6un1:zvEN2U+T6i5LirrllHy4HUcMQY6i
Score

10^/10

discovery evasion persistence
- Modifies WinLogon for persistence
  persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence