609e3a4e71537df2af6902d6cacc7d1f72089823ecfdfab987b293d2530a8a51 | Triage

Sharing

General

Target

609e3a4e71537df2af6902d6cacc7d1f72089823ecfdfab987b293d2530a8a51N.exe
Size

136KB
Sample

241203-t6xv1atmex
MD5

6b9f3f1d51c4c4608e9459fb2a30d390
SHA1

63aed05364191d433c6055f727ad2c669f019af5
SHA256

609e3a4e71537df2af6902d6cacc7d1f72089823ecfdfab987b293d2530a8a51
SHA512

a5aaef1da126388613ada546b56a456822206d802f0c8138382130b0594391ef8cf04422227a85fa59d6449c70e0bf5e469ccff4bd8a54ea5123a67a71ff722d
SSDEEP

3072:3LVoDvPd+A4WhkhXDl+i1lApwH08TdpIIIIIIIIIIIIIIIII/IIIIIIIIIIIIII5:ZopGGgbiwU8J+

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  609e3a4e71537df2af6902d6cacc7d1f72089823ecfdfab987b293d2530a8a51N.exe
- Size
  
  136KB
- MD5
  
  6b9f3f1d51c4c4608e9459fb2a30d390
- SHA1
  
  63aed05364191d433c6055f727ad2c669f019af5
- SHA256
  
  609e3a4e71537df2af6902d6cacc7d1f72089823ecfdfab987b293d2530a8a51
- SHA512
  
  a5aaef1da126388613ada546b56a456822206d802f0c8138382130b0594391ef8cf04422227a85fa59d6449c70e0bf5e469ccff4bd8a54ea5123a67a71ff722d
- SSDEEP
  
  3072:3LVoDvPd+A4WhkhXDl+i1lApwH08TdpIIIIIIIIIIIIIIIII/IIIIIIIIIIIIII5:ZopGGgbiwU8J+
Score

10^/10

discovery evasion persistence
- Modifies WinLogon for persistence
  persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Event Triggered Execution

Change Default File Association

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence