bc80027b9421054910b56445bb8d992e906a1ee4f0f37e3da1794a6e2f468776 | Triage

Sharing

General

Target

bc80027b9421054910b56445bb8d992e906a1ee4f0f37e3da1794a6e2f468776N.exe
Size

124KB
Sample

241126-bflqyaspbk
MD5

7301a13438e193ea4b7aadf5aad3b6f0
SHA1

25494de14aaebabdbc4ffbf6e5d999cc1cd85cfa
SHA256

bc80027b9421054910b56445bb8d992e906a1ee4f0f37e3da1794a6e2f468776
SHA512

c8cd44e770d958cc5080870f62ad495c37be09c4bdba9607b9731a37fdbe2f725ab362ac911f75b54032c93f739251d1671ff282a7d2053066aa968039e58239
SSDEEP

1536:JFq8QHPxGOETRmXknwIE5HpYFVL1tQnO1I4/3cJkobihyCe:LSPxGOETYSEvIPeO1IOcJRbx

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  bc80027b9421054910b56445bb8d992e906a1ee4f0f37e3da1794a6e2f468776N.exe
- Size
  
  124KB
- MD5
  
  7301a13438e193ea4b7aadf5aad3b6f0
- SHA1
  
  25494de14aaebabdbc4ffbf6e5d999cc1cd85cfa
- SHA256
  
  bc80027b9421054910b56445bb8d992e906a1ee4f0f37e3da1794a6e2f468776
- SHA512
  
  c8cd44e770d958cc5080870f62ad495c37be09c4bdba9607b9731a37fdbe2f725ab362ac911f75b54032c93f739251d1671ff282a7d2053066aa968039e58239
- SSDEEP
  
  1536:JFq8QHPxGOETRmXknwIE5HpYFVL1tQnO1I4/3cJkobihyCe:LSPxGOETYSEvIPeO1IOcJRbx
Score

10^/10

evasion persistence discovery
- Modifies firewall policy service
  evasion
- Adds policy Run key to start application
  persistence
- Sets service image path in registry
  persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

discoveryevasionpersistence