d74425127bc8a153b3a3d927f79cba48c1a9101af845c2c490e1247bacfdfe77 | Triage

Sharing

General

Target

d74425127bc8a153b3a3d927f79cba48c1a9101af845c2c490e1247bacfdfe77N
Size

122KB
Sample

240920-2ckycasalp
MD5

21704cd58c2da8258321f4939c34ed80
SHA1

53aac6f594cb77e1b780cb7cfe47c4b323d50e53
SHA256

d74425127bc8a153b3a3d927f79cba48c1a9101af845c2c490e1247bacfdfe77
SHA512

9e225a2b00cbe9e5f5e50d0338a553ab6edfbbf2b65a23fd58be66a7eb8bce81ba90efe91144ed79d0f6a8498c452711d141103c36856888c400ee68668668aa
SSDEEP

1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4o:6u8ANCUdgfmD7zey0KUj6TjR9i4o

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  d74425127bc8a153b3a3d927f79cba48c1a9101af845c2c490e1247bacfdfe77N
- Size
  
  122KB
- MD5
  
  21704cd58c2da8258321f4939c34ed80
- SHA1
  
  53aac6f594cb77e1b780cb7cfe47c4b323d50e53
- SHA256
  
  d74425127bc8a153b3a3d927f79cba48c1a9101af845c2c490e1247bacfdfe77
- SHA512
  
  9e225a2b00cbe9e5f5e50d0338a553ab6edfbbf2b65a23fd58be66a7eb8bce81ba90efe91144ed79d0f6a8498c452711d141103c36856888c400ee68668668aa
- SSDEEP
  
  1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4o:6u8ANCUdgfmD7zey0KUj6TjR9i4o
Score

10^/10

discovery evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Network Share Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion