76a4e97d29f23282682d4bf714d8a1a93ce954b3eda38d749a83552e990ecb4f | Triage

Sharing

General

Target

ILoveKids.exe
Size

90KB
Sample

250328-257yksttfw
MD5

b6c4c49375cb3b54a63066deec0f23b5
SHA1

4f8b5cbaf0e20875eccab2a6dc08b10bd4880fcf
SHA256

76a4e97d29f23282682d4bf714d8a1a93ce954b3eda38d749a83552e990ecb4f
SHA512

63c612a920e4350c1b91329c741022a3835d18d30ecf189f0ac9535f37efb28a34a86ed3a76d3a2575562b7525c7fd33df52d6e0dcb61045a95a65d4aa99601a
SSDEEP

1536:P7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIf2wNiixOQ:j7DhdC6kzWypvaQ0FxyNTBf2C

Score

8^/10

defense_evasion discovery persistence

Malware Config

Targets

- Target
  
  ILoveKids.exe
- Size
  
  90KB
- MD5
  
  b6c4c49375cb3b54a63066deec0f23b5
- SHA1
  
  4f8b5cbaf0e20875eccab2a6dc08b10bd4880fcf
- SHA256
  
  76a4e97d29f23282682d4bf714d8a1a93ce954b3eda38d749a83552e990ecb4f
- SHA512
  
  63c612a920e4350c1b91329c741022a3835d18d30ecf189f0ac9535f37efb28a34a86ed3a76d3a2575562b7525c7fd33df52d6e0dcb61045a95a65d4aa99601a
- SSDEEP
  
  1536:P7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIf2wNiixOQ:j7DhdC6kzWypvaQ0FxyNTBf2C
Score

8^/10

defense_evasion discovery persistence
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  defense_evasion
- Modifies file permissions
  discovery
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

File and Directory Permissions Modification

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence