fccb402cd1b689d2148dc21689aaa4383555ec658f5a98af3be3dcac8ce5ab42 | Triage

Sharing

General

Target

875aae56a2c8146a9889e87a25b2f6f0N.exe
Size

22KB
Sample

240818-gga9gs1frn
MD5

875aae56a2c8146a9889e87a25b2f6f0
SHA1

618dcd7d144b4824c98dbb53a5182cec858de520
SHA256

fccb402cd1b689d2148dc21689aaa4383555ec658f5a98af3be3dcac8ce5ab42
SHA512

a53cd73e25a8b2b4461334bb8961b42292efb9dd2e14a689fa621c32cfb442322c5b320502a037125a166554e4063aa223cf0cc82d6b2ababe0a8563d66fcf45
SSDEEP

384:ztGhPq/PSVoYZXgW8PK3mUarVMYVt8a6c6n5er7EgSgXuJDth0B:zt16VoYZwPK2UarVMYYaFbr799mHi

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  875aae56a2c8146a9889e87a25b2f6f0N.exe
- Size
  
  22KB
- MD5
  
  875aae56a2c8146a9889e87a25b2f6f0
- SHA1
  
  618dcd7d144b4824c98dbb53a5182cec858de520
- SHA256
  
  fccb402cd1b689d2148dc21689aaa4383555ec658f5a98af3be3dcac8ce5ab42
- SHA512
  
  a53cd73e25a8b2b4461334bb8961b42292efb9dd2e14a689fa621c32cfb442322c5b320502a037125a166554e4063aa223cf0cc82d6b2ababe0a8563d66fcf45
- SSDEEP
  
  384:ztGhPq/PSVoYZXgW8PK3mUarVMYVt8a6c6n5er7EgSgXuJDth0B:zt16VoYZwPK2UarVMYYaFbr799mHi
Score

10^/10

discovery evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Network Share Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion