d6229b04a41939824cead7e7a1e53e0d5ca088b9638f524dc092235db3dc2bbf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6229b04a41939824cead7e7a1e53e0d5ca088b9638f524dc092235db3dc2bbf
Size

72KB
Sample

240810-drpcbatcjr
MD5

5dde7085db9630d3fcc083e21e132eba
SHA1

a885ab1121329eaa50293025d88fc793618e4e65
SHA256

d6229b04a41939824cead7e7a1e53e0d5ca088b9638f524dc092235db3dc2bbf
SHA512

b00b914ceca7baadc02c39d14658ba4f143e01d4e410739b20b5e506e06707b11465b9d9f01a1f8e06be3de8027d940ec6731546c4162230427822710f37009f
SSDEEP

768:rpQNwC3BEc4QEfu0Ei8XxNDINE3BEJwRr3kq:teThavEjDWguKUq

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  d6229b04a41939824cead7e7a1e53e0d5ca088b9638f524dc092235db3dc2bbf
- Size
  
  72KB
- MD5
  
  5dde7085db9630d3fcc083e21e132eba
- SHA1
  
  a885ab1121329eaa50293025d88fc793618e4e65
- SHA256
  
  d6229b04a41939824cead7e7a1e53e0d5ca088b9638f524dc092235db3dc2bbf
- SHA512
  
  b00b914ceca7baadc02c39d14658ba4f143e01d4e410739b20b5e506e06707b11465b9d9f01a1f8e06be3de8027d940ec6731546c4162230427822710f37009f
- SSDEEP
  
  768:rpQNwC3BEc4QEfu0Ei8XxNDINE3BEJwRr3kq:teThavEjDWguKUq
Score

10^/10

discovery evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Network Share Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion