b940c9916cffd184e0f26b2e8c3c12e326f5c7bea8d1cd9fe5af68953ca4d09e | Triage

Sharing

General

Target

b940c9916cffd184e0f26b2e8c3c12e326f5c7bea8d1cd9fe5af68953ca4d09eN.exe
Size

206KB
Sample

250120-k7eldaslfq
MD5

d9b79a2638e6b7f6df618ffc260a4f50
SHA1

7f52dfd1a1c9d6cfd1b8b2b4eb30bef21d57fa81
SHA256

b940c9916cffd184e0f26b2e8c3c12e326f5c7bea8d1cd9fe5af68953ca4d09e
SHA512

4f39e6407730520139e03ead2e1f8ad2d1d7ebb7bd1ddf304934b87937e4f6b274b002d4c9990754364187134e0b052100d0dd95b7224af332ca9cb8866977f1
SSDEEP

1536:/fsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbJdylllllllllllld:/VqoCl/YgjxEufVU0TbTyDDalbA

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  b940c9916cffd184e0f26b2e8c3c12e326f5c7bea8d1cd9fe5af68953ca4d09eN.exe
- Size
  
  206KB
- MD5
  
  d9b79a2638e6b7f6df618ffc260a4f50
- SHA1
  
  7f52dfd1a1c9d6cfd1b8b2b4eb30bef21d57fa81
- SHA256
  
  b940c9916cffd184e0f26b2e8c3c12e326f5c7bea8d1cd9fe5af68953ca4d09e
- SHA512
  
  4f39e6407730520139e03ead2e1f8ad2d1d7ebb7bd1ddf304934b87937e4f6b274b002d4c9990754364187134e0b052100d0dd95b7224af332ca9cb8866977f1
- SSDEEP
  
  1536:/fsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbJdylllllllllllld:/VqoCl/YgjxEufVU0TbTyDDalbA
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence