3f86399def2eb8433bb246426bbda4e0dbaf8b6ff91a502a0b16db7a75b4c7ff | Triage

Sharing

General

Target

3f86399def2eb8433bb246426bbda4e0dbaf8b6ff91a502a0b16db7a75b4c7ff
Size

122KB
Sample

240908-zxt1msxfre
MD5

0537e25b94b52cd9242541979a8fed91
SHA1

772a98cc80bf13383256c3b16f806cfc5711edf5
SHA256

3f86399def2eb8433bb246426bbda4e0dbaf8b6ff91a502a0b16db7a75b4c7ff
SHA512

848d0c40d18f1a24172bda7469dd966a741693de734f2da8f882e4c0671f568598570174a491c6c16a317b82c615a9915c4d3dc05962819929d2f06986c4bde9
SSDEEP

1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4I:6u8ANCUdgfmD7zey0KUj6TjR9i4I

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  3f86399def2eb8433bb246426bbda4e0dbaf8b6ff91a502a0b16db7a75b4c7ff
- Size
  
  122KB
- MD5
  
  0537e25b94b52cd9242541979a8fed91
- SHA1
  
  772a98cc80bf13383256c3b16f806cfc5711edf5
- SHA256
  
  3f86399def2eb8433bb246426bbda4e0dbaf8b6ff91a502a0b16db7a75b4c7ff
- SHA512
  
  848d0c40d18f1a24172bda7469dd966a741693de734f2da8f882e4c0671f568598570174a491c6c16a317b82c615a9915c4d3dc05962819929d2f06986c4bde9
- SSDEEP
  
  1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4I:6u8ANCUdgfmD7zey0KUj6TjR9i4I
Score

10^/10

discovery evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Network Share Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion