d49bc433cf5da708864084ac81fd540db14a92ed57971e4b9a45bfee15439a6e | Triage

Sharing

General

Target

d49bc433cf5da708864084ac81fd540db14a92ed57971e4b9a45bfee15439a6e
Size

135KB
Sample

241121-kzz74szfpa
MD5

6846d3a6156030f790645430397d3d65
SHA1

be370f708018d3e34ef09b0199b3c93dac8304ac
SHA256

d49bc433cf5da708864084ac81fd540db14a92ed57971e4b9a45bfee15439a6e
SHA512

9b55a1d95f8fb5316f66198e35f75d36f1026e7ad51e1ab9da3fa7e7732f58b87afeb69ad3fd6035ea7ed2ea9a7b83073c66d4ce8438646e9656e8586df6e8cb
SSDEEP

1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVhpalY:UVqoCl/YgjxEufVU0TbTyDDalQlY

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  d49bc433cf5da708864084ac81fd540db14a92ed57971e4b9a45bfee15439a6e
- Size
  
  135KB
- MD5
  
  6846d3a6156030f790645430397d3d65
- SHA1
  
  be370f708018d3e34ef09b0199b3c93dac8304ac
- SHA256
  
  d49bc433cf5da708864084ac81fd540db14a92ed57971e4b9a45bfee15439a6e
- SHA512
  
  9b55a1d95f8fb5316f66198e35f75d36f1026e7ad51e1ab9da3fa7e7732f58b87afeb69ad3fd6035ea7ed2ea9a7b83073c66d4ce8438646e9656e8586df6e8cb
- SSDEEP
  
  1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVhpalY:UVqoCl/YgjxEufVU0TbTyDDalQlY
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence