9b8a4898bbebedf235ecf9aefcec7ee1d777bf4d657afadf78ea040829aa4db7 | Triage

Sharing

General

Target

9b8a4898bbebedf235ecf9aefcec7ee1d777bf4d657afadf78ea040829aa4db7N
Size

131KB
Sample

240919-glb2kstgpp
MD5

10c41edc9edfb8e42d747472d69ce1f0
SHA1

4311cf1883e6567594acbcb92eefef8fefb19762
SHA256

9b8a4898bbebedf235ecf9aefcec7ee1d777bf4d657afadf78ea040829aa4db7
SHA512

e2ad04eaa22b54305a1539242b47342de8ea08584ee0a07c3a8c82baf70cac65bc42e4e4c5f85e4c0c671346ff24e20da1632e3f975163d58199d8b09225837e
SSDEEP

768:/pQNwC3BEddsEqOt/hydxyFtwLR+7DSdAwV3BEW+O:BeTce/U/hah36qdZ

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  9b8a4898bbebedf235ecf9aefcec7ee1d777bf4d657afadf78ea040829aa4db7N
- Size
  
  131KB
- MD5
  
  10c41edc9edfb8e42d747472d69ce1f0
- SHA1
  
  4311cf1883e6567594acbcb92eefef8fefb19762
- SHA256
  
  9b8a4898bbebedf235ecf9aefcec7ee1d777bf4d657afadf78ea040829aa4db7
- SHA512
  
  e2ad04eaa22b54305a1539242b47342de8ea08584ee0a07c3a8c82baf70cac65bc42e4e4c5f85e4c0c671346ff24e20da1632e3f975163d58199d8b09225837e
- SSDEEP
  
  768:/pQNwC3BEddsEqOt/hydxyFtwLR+7DSdAwV3BEW+O:BeTce/U/hah36qdZ
Score

10^/10

discovery evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Network Share Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion