1c17ac3bab8bb94d79dbac1d96dc3c851a27ca69c3a58214c7f9fabc84709d1c

General

Target
1c17ac3bab8bb94d79dbac1d96dc3c851a27ca69c3a58214c7f9fabc84709d1c.exe
Size 517KB
Sample240905-be925s1cmb
SHA256 1c17ac3bab8bb94d79dbac1d96dc3c851a27ca69c3a58214c7f9fabc84709d1c
MD5 16896ff6cc1f6405d6572112fa99e77a
SHA1 a2679c0869ddc42e6521f4c382ae5d1d8946e311
SHA512 91ce438c820aa2873f5c48be681267027a0d43a30b1d572ee11490b5f8261cbfd88b5bd8f4706f0463a557fbc604660cee1e250d47dfe43c7deb55e5f78b36b5
SSDEEP 6144:tqjIR4uIDtVLjU/TyxcNY9Ezrs+63D9Wmy9eHhiYSz9Zh7iRhuV2DUFRfDOca6ZL:E5INYaR6D54eBiYSwaV2DC0cuuO+
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Targets

- Target
  1c17ac3bab8bb94d79dbac1d96dc3c851a27ca69c3a58214c7f9fabc84709d1c.exe
- Size 517KB
- SHA256 1c17ac3bab8bb94d79dbac1d96dc3c851a27ca69c3a58214c7f9fabc84709d1c
- MD5 16896ff6cc1f6405d6572112fa99e77a
- SHA1 a2679c0869ddc42e6521f4c382ae5d1d8946e311
- SHA512 91ce438c820aa2873f5c48be681267027a0d43a30b1d572ee11490b5f8261cbfd88b5bd8f4706f0463a557fbc604660cee1e250d47dfe43c7deb55e5f78b36b5
- SSDEEP 6144:tqjIR4uIDtVLjU/TyxcNY9Ezrs+63D9Wmy9eHhiYSz9Zh7iRhuV2DUFRfDOca6ZL:E5INYaR6D54eBiYSwaV2DC0cuuO+
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 d1fa47d8485b212eccd266fe5fc2be9750c4b843da78bddd2349ab58ef138b32
- MD5 adad756e278127e9d31eb33d6e053740
- SHA1 71943b9697441152b131a21075f5463ab40ca6ed
- SHA512 047fa57a44ed2c2f214be68af1b2740591e4b508a4ca9c2eed7f84b3bb5b6f0a7c1d584e6790cc231dfbb6a23a96f826079ed5b0d9d961e95397ffc345cb7a5c
- SSDEEP 48:im11EhqneMPUptuMMNvimk2BAZuMTRCpYEvJdUJvR0Jlof5dwe:F1ppl9NLBAZuYtR0Gd
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 269d232712c86983336badb40b9e55e80052d8389ed095ebf9214964d43b6bb1
- MD5 34442e1e0c2870341df55e1b7b3cccdc
- SHA1 99b2fa21aead4b6ccd8ff2f6d3d3453a51d9c70c
- SHA512 4a8c57fb12997438b488b862f3fc9dc0f236e07bb47b2bce6053dcb03ac7ad171842f02ac749f02dda4719c681d186330524cd2953d33cb50854844e74b33d51
- SSDEEP 192:jPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4I:u7VpNo8gmOyRsVc4
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral5 behavioral6

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Drops file in System32 directory

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6