ed506815979d039cb13f24ef565a9d8e28d442b01507da413b090cbaffdc73a6 | Triage

Sharing

General

Target

icsys.icn.exe
Size

135KB
Sample

240919-hvzdxawemh
MD5

8725f3e210101a5732789764869a2e32
SHA1

bd6cea1e863892119a53dbc9e09638ea0dffad21
SHA256

ed506815979d039cb13f24ef565a9d8e28d442b01507da413b090cbaffdc73a6
SHA512

7d3bf2f0dd6fec46cd2496037ddc60f4b9c4b3a6a795c63bd540c6b70886218296bc8facc2ee8c6c405cc46b6b29eab66843740b5a0e5fdfab000337a671f409
SSDEEP

1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVXB:UVqoCl/YgjxEufVU0TbTyDDalRB

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  icsys.icn.exe
- Size
  
  135KB
- MD5
  
  8725f3e210101a5732789764869a2e32
- SHA1
  
  bd6cea1e863892119a53dbc9e09638ea0dffad21
- SHA256
  
  ed506815979d039cb13f24ef565a9d8e28d442b01507da413b090cbaffdc73a6
- SHA512
  
  7d3bf2f0dd6fec46cd2496037ddc60f4b9c4b3a6a795c63bd540c6b70886218296bc8facc2ee8c6c405cc46b6b29eab66843740b5a0e5fdfab000337a671f409
- SSDEEP
  
  1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVXB:UVqoCl/YgjxEufVU0TbTyDDalRB
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence