95bbd494cecc25a422fa35912ec2365f3200d5a18ea4bfad5566432eb0834f9f

Resubmissions

27/10/2022, 16:10

221027-tmnszscfh610

13/04/2022, 09:32

220413-lhmfcsahbk8

Sharing

Copy URL Twitter E-mail

General

Target
IconCacheService.dll
Size 248KB
Sample220413-lhmfcsahbk
SHA256 95bbd494cecc25a422fa35912ec2365f3200d5a18ea4bfad5566432eb0834f9f
MD5 e031c9984f65a9060ec1e70fbb84746b
SHA1 b01950ed9b1929fee04a9c23ac49e3de89e37228
SHA512 5dd1f004516b9fc0f0c36bca22dafaed9103191ebeea291e8d6f32f9b01b77fb18a0c4c5d04bd760a38651380a3680ede8b07f3d522f710b3df228ac8d934a2b
MD5 SHA1 SHA512

Score

8^/10

persistence

Malware Config

Targets

- Target
  IconCacheService.dll
- Size 248KB
- SHA256 95bbd494cecc25a422fa35912ec2365f3200d5a18ea4bfad5566432eb0834f9f
- MD5 e031c9984f65a9060ec1e70fbb84746b
- SHA1 b01950ed9b1929fee04a9c23ac49e3de89e37228
- SHA512 5dd1f004516b9fc0f0c36bca22dafaed9103191ebeea291e8d6f32f9b01b77fb18a0c4c5d04bd760a38651380a3680ede8b07f3d522f710b3df228ac8d934a2b
- MD5 SHA1 SHA512
Score

8^/10

persistence
- Blocklisted process makes network request
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Install Root Certificate

T1130

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Blocklisted process makes network request

Adds Run key to start application

Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2