5204e424da9a9a148340c2814d7e16c06bfe7d8fbe2af454c364d9c32fbfe266 | Triage

Sharing

General

Target

5204e424da9a9a148340c2814d7e16c06bfe7d8fbe2af454c364d9c32fbfe266N
Size

122KB
Sample

240920-wm8t9szejl
MD5

c72c5e0f4ae8b464b2830c4e079ae5c0
SHA1

330c388bb9daba492edff6803e7ba2eb6ed74d51
SHA256

5204e424da9a9a148340c2814d7e16c06bfe7d8fbe2af454c364d9c32fbfe266
SHA512

94f5f7c72babde79d4e7eb3c66e2295ae05253fb7da65d0c49e31e89ca748e16669f70f6c3c1df9494bf1bd3c74e556ce3a7a55495063e7e21306b8dc33c3842
SSDEEP

1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4q:6u8ANCUdgfmD7zey0KUj6TjR9i4q

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  5204e424da9a9a148340c2814d7e16c06bfe7d8fbe2af454c364d9c32fbfe266N
- Size
  
  122KB
- MD5
  
  c72c5e0f4ae8b464b2830c4e079ae5c0
- SHA1
  
  330c388bb9daba492edff6803e7ba2eb6ed74d51
- SHA256
  
  5204e424da9a9a148340c2814d7e16c06bfe7d8fbe2af454c364d9c32fbfe266
- SHA512
  
  94f5f7c72babde79d4e7eb3c66e2295ae05253fb7da65d0c49e31e89ca748e16669f70f6c3c1df9494bf1bd3c74e556ce3a7a55495063e7e21306b8dc33c3842
- SSDEEP
  
  1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4q:6u8ANCUdgfmD7zey0KUj6TjR9i4q
Score

10^/10

discovery evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Network Share Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion