164c2636d76754024f9f82573adff2ffdf606c9f4c36cb9abdaee4924005c86b | Triage

Sharing

General

Target

164c2636d76754024f9f82573adff2ffdf606c9f4c36cb9abdaee4924005c86b
Size

122KB
Sample

240902-xm664swfnd
MD5

2b8be94c5a809d5ab629300be4e03731
SHA1

81d7be8c6d45436bd533ad738129f9fb24807836
SHA256

164c2636d76754024f9f82573adff2ffdf606c9f4c36cb9abdaee4924005c86b
SHA512

04dc0f9dd281e0297e5aac75fe5de60f2e1c94b86f67c50627d54b66a22f42e369befb7c6d9d80679dd3adcb194ca1d1da99966bce01f7cad7e3c5b4443d41a3
SSDEEP

1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4Z:6u8ANCUdgfmD7zey0KUj6TjR9i4Z

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  164c2636d76754024f9f82573adff2ffdf606c9f4c36cb9abdaee4924005c86b
- Size
  
  122KB
- MD5
  
  2b8be94c5a809d5ab629300be4e03731
- SHA1
  
  81d7be8c6d45436bd533ad738129f9fb24807836
- SHA256
  
  164c2636d76754024f9f82573adff2ffdf606c9f4c36cb9abdaee4924005c86b
- SHA512
  
  04dc0f9dd281e0297e5aac75fe5de60f2e1c94b86f67c50627d54b66a22f42e369befb7c6d9d80679dd3adcb194ca1d1da99966bce01f7cad7e3c5b4443d41a3
- SSDEEP
  
  1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4Z:6u8ANCUdgfmD7zey0KUj6TjR9i4Z
Score

10^/10

discovery evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Network Share Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion