165fefad7e85572095a63486918eebf427a3d9e059f242420d54449e4d1d83cb | Triage

Sharing

General

Target

165fefad7e85572095a63486918eebf427a3d9e059f242420d54449e4d1d83cbN
Size

60KB
Sample

240920-fn18tazgpn
MD5

a3527ced455df6200f18dad80e36ea90
SHA1

81eabd8e2c27c7b1284ff6b3e40127c9b8425f20
SHA256

165fefad7e85572095a63486918eebf427a3d9e059f242420d54449e4d1d83cb
SHA512

e6c02bcba8f652abee379d9f2e158ea135d9c89619e4f5d78f3e271a05145b3662d3cffcf7881aa511c6d197e1310ef5cf3f48f2017e26c5bc3be0dbc96a36e2
SSDEEP

768:xzUXTQjaEyVm195IcIjNQSkwy3BEP+9XOQ69zbjlAAX5e9zj:eXTdEQcEWxTUwizbR9Xwzj

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  165fefad7e85572095a63486918eebf427a3d9e059f242420d54449e4d1d83cbN
- Size
  
  60KB
- MD5
  
  a3527ced455df6200f18dad80e36ea90
- SHA1
  
  81eabd8e2c27c7b1284ff6b3e40127c9b8425f20
- SHA256
  
  165fefad7e85572095a63486918eebf427a3d9e059f242420d54449e4d1d83cb
- SHA512
  
  e6c02bcba8f652abee379d9f2e158ea135d9c89619e4f5d78f3e271a05145b3662d3cffcf7881aa511c6d197e1310ef5cf3f48f2017e26c5bc3be0dbc96a36e2
- SSDEEP
  
  768:xzUXTQjaEyVm195IcIjNQSkwy3BEP+9XOQ69zbjlAAX5e9zj:eXTdEQcEWxTUwizbR9Xwzj
Score

10^/10

discovery evasion persistence
- Modifies visibility of file extensions in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Power Settings
  powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Power Settings

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Network Share Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasion