d146deab32fdab4c09a6978989bf0ac5e3b0696fd0b8d70cfe9d50380d86a5a8 | Triage

Sharing

General

Target

d146deab32fdab4c09a6978989bf0ac5e3b0696fd0b8d70cfe9d50380d86a5a8
Size

135KB
Sample

250111-hlye9azjgy
MD5

c2b5290f38c56c8587d53a266de507fc
SHA1

9af095f8c495066c41e2ee31ee53e326d3d933ec
SHA256

d146deab32fdab4c09a6978989bf0ac5e3b0696fd0b8d70cfe9d50380d86a5a8
SHA512

a0e95a41cc90b37985c0ee92b9b442d53fc2981f2a3ee2b376f3f72c088c502b4d52ada1d32ad5e954940d557d062e4ad769fc35d7018858e080927e5f89f645
SSDEEP

1536:XfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbgn69999999999990:XVqoCl/YgjxEufVU0TbTyDDalsn

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  d146deab32fdab4c09a6978989bf0ac5e3b0696fd0b8d70cfe9d50380d86a5a8
- Size
  
  135KB
- MD5
  
  c2b5290f38c56c8587d53a266de507fc
- SHA1
  
  9af095f8c495066c41e2ee31ee53e326d3d933ec
- SHA256
  
  d146deab32fdab4c09a6978989bf0ac5e3b0696fd0b8d70cfe9d50380d86a5a8
- SHA512
  
  a0e95a41cc90b37985c0ee92b9b442d53fc2981f2a3ee2b376f3f72c088c502b4d52ada1d32ad5e954940d557d062e4ad769fc35d7018858e080927e5f89f645
- SSDEEP
  
  1536:XfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbgn69999999999990:XVqoCl/YgjxEufVU0TbTyDDalsn
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence