82dd7120179e4f21a657fe122bf92bc15b85bf6af7f3d23dde9b6e707b62cc27 | Triage

Sharing

General

Target

82dd7120179e4f21a657fe122bf92bc15b85bf6af7f3d23dde9b6e707b62cc27.exe
Size

95KB
Sample

241121-vpl8lsykbq
MD5

baefc3ceebbe9393ca7f02b1a0b91fb1
SHA1

1747da62e3600f510987f9e77ab2658d0b0ae9c7
SHA256

82dd7120179e4f21a657fe122bf92bc15b85bf6af7f3d23dde9b6e707b62cc27
SHA512

e38c0e8deb1b6b1d6d7f3f8ed0b1b16cd2a4ef15482d5bd3e6676c963435cd545674107460c2aaeb3f35e45b8b9df005b09c77818aa28ac9c8b1e7673b4c160c
SSDEEP

1536:pOhb6Oi9wchHbUlkiwV9MIRKj7MeIYRpttWa4YyMJ//usFvpf3CQtm:pcchHbUyxPKj7MeI6TyMEKRXm

Score

8^/10

evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  82dd7120179e4f21a657fe122bf92bc15b85bf6af7f3d23dde9b6e707b62cc27.exe
- Size
  
  95KB
- MD5
  
  baefc3ceebbe9393ca7f02b1a0b91fb1
- SHA1
  
  1747da62e3600f510987f9e77ab2658d0b0ae9c7
- SHA256
  
  82dd7120179e4f21a657fe122bf92bc15b85bf6af7f3d23dde9b6e707b62cc27
- SHA512
  
  e38c0e8deb1b6b1d6d7f3f8ed0b1b16cd2a4ef15482d5bd3e6676c963435cd545674107460c2aaeb3f35e45b8b9df005b09c77818aa28ac9c8b1e7673b4c160c
- SSDEEP
  
  1536:pOhb6Oi9wchHbUlkiwV9MIRKj7MeIYRpttWa4YyMJ//usFvpf3CQtm:pcchHbUyxPKj7MeI6TyMEKRXm
Score

8^/10

evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalation

behavioral2

evasionpersistenceprivilege_escalation