bd72b3de20dc8408a601863b10f0d9cce916ee6f445fbf883749a24fd20a351e | Triage

Sharing

General

Target

bd72b3de20dc8408a601863b10f0d9cce916ee6f445fbf883749a24fd20a351e
Size

135KB
Sample

241122-efqlnszmel
MD5

c2b70ac803a3125ffcc5f3ac7f0097c6
SHA1

c1234de17084f3150ca662f76af203b80837d917
SHA256

bd72b3de20dc8408a601863b10f0d9cce916ee6f445fbf883749a24fd20a351e
SHA512

a5dea0aa1c9c6819115ecc9f945b43fda143c2170d3b9a5bf882c2dc166b7eb4257046c201cc0f2eb0c4943818f2a1d2b48ef0aa839ffdffda49aaaeb1d28bcb
SSDEEP

1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVmu:UVqoCl/YgjxEufVU0TbTyDDalQu

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  bd72b3de20dc8408a601863b10f0d9cce916ee6f445fbf883749a24fd20a351e
- Size
  
  135KB
- MD5
  
  c2b70ac803a3125ffcc5f3ac7f0097c6
- SHA1
  
  c1234de17084f3150ca662f76af203b80837d917
- SHA256
  
  bd72b3de20dc8408a601863b10f0d9cce916ee6f445fbf883749a24fd20a351e
- SHA512
  
  a5dea0aa1c9c6819115ecc9f945b43fda143c2170d3b9a5bf882c2dc166b7eb4257046c201cc0f2eb0c4943818f2a1d2b48ef0aa839ffdffda49aaaeb1d28bcb
- SSDEEP
  
  1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVmu:UVqoCl/YgjxEufVU0TbTyDDalQu
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence