a357e6f7ddb7c0202f47d5484c4529c822544ad3bb5f5fa7579a00b01767de6f | Triage

Sharing

General

Target

a357e6f7ddb7c0202f47d5484c4529c822544ad3bb5f5fa7579a00b01767de6fN
Size

64KB
Sample

240919-gbqf8atdnm
MD5

4d456b892ee405c87653e6efbde00010
SHA1

17de070fe854cff98cb1ddd32d0b886fb2812df8
SHA256

a357e6f7ddb7c0202f47d5484c4529c822544ad3bb5f5fa7579a00b01767de6f
SHA512

c8820c5b6c4ef9255895b210d68bbff521ba392f59049e14fa625db69f07b47ed8a711ab820be36c3c2b5ef65882f06207be2e3317c5c75c215c16adfc3be201
SSDEEP

768:qpQNwC3BET4QEfu0Ei8XxNDIN/3BEJwsrm:KeTqavEjDWpuhm

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  a357e6f7ddb7c0202f47d5484c4529c822544ad3bb5f5fa7579a00b01767de6fN
- Size
  
  64KB
- MD5
  
  4d456b892ee405c87653e6efbde00010
- SHA1
  
  17de070fe854cff98cb1ddd32d0b886fb2812df8
- SHA256
  
  a357e6f7ddb7c0202f47d5484c4529c822544ad3bb5f5fa7579a00b01767de6f
- SHA512
  
  c8820c5b6c4ef9255895b210d68bbff521ba392f59049e14fa625db69f07b47ed8a711ab820be36c3c2b5ef65882f06207be2e3317c5c75c215c16adfc3be201
- SSDEEP
  
  768:qpQNwC3BET4QEfu0Ei8XxNDIN/3BEJwsrm:KeTqavEjDWpuhm
Score

10^/10

discovery evasion persistence
- Modifies visibility of file extensions in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Power Settings
  powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Power Settings

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Network Share Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasion