099e80aaedb65f4b42706fcb3a1f81a85b81a49298b37052c6824c2284e06303 | Triage

Sharing

General

Target

099e80aaedb65f4b42706fcb3a1f81a85b81a49298b37052c6824c2284e06303
Size

121KB
Sample

241122-ycc1ysxlcs
MD5

9d34f8189b83e6deaf9da815778d8fd3
SHA1

ee1ba2f9c5266a46c5bfa2e8e0aaf557fddaa069
SHA256

099e80aaedb65f4b42706fcb3a1f81a85b81a49298b37052c6824c2284e06303
SHA512

9e702e5ddd3a7d8b7a2eb367367b823a9b04b3111f71608198b22c39f8e0d874c8cc6204cc1eb7e8f59d1855f5ecd55eaeba4a3b1c1a74e980c87c93728279e5
SSDEEP

1536:9X9TaOt5OuXpBFZQUSvnsk+z/ypuOASsIc9XmkbxH3D:9X9TP3OuXpBkAz/yjvc9X/9XD

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  099e80aaedb65f4b42706fcb3a1f81a85b81a49298b37052c6824c2284e06303
- Size
  
  121KB
- MD5
  
  9d34f8189b83e6deaf9da815778d8fd3
- SHA1
  
  ee1ba2f9c5266a46c5bfa2e8e0aaf557fddaa069
- SHA256
  
  099e80aaedb65f4b42706fcb3a1f81a85b81a49298b37052c6824c2284e06303
- SHA512
  
  9e702e5ddd3a7d8b7a2eb367367b823a9b04b3111f71608198b22c39f8e0d874c8cc6204cc1eb7e8f59d1855f5ecd55eaeba4a3b1c1a74e980c87c93728279e5
- SSDEEP
  
  1536:9X9TaOt5OuXpBFZQUSvnsk+z/ypuOASsIc9XmkbxH3D:9X9TP3OuXpBkAz/yjvc9X/9XD
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence