f6bf553b80a2caec2d0a9f295f7c7a8ea153c95ec5a72cb2b1746fc7a06490dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6bf553b80a2caec2d0a9f295f7c7a8ea153c95ec5a72cb2b1746fc7a06490ddN
Size

122KB
Sample

240928-xhvyaatemd
MD5

f2c26f31cb704973e8d0304c87884450
SHA1

51b4cba6726d07c6c4cce60fe66ea4e7c382efbb
SHA256

f6bf553b80a2caec2d0a9f295f7c7a8ea153c95ec5a72cb2b1746fc7a06490dd
SHA512

25fa678e86a4a81e4c9f50f348ba48a97d6212ea7ca8f5f90690f7789548c9ab607424b95167f7739edeab5819b236a1c08319bc0960e53766dba11aed5f7d9c
SSDEEP

1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4N:6u8ANCUdgfmD7zey0KUj6TjR9i4N

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  f6bf553b80a2caec2d0a9f295f7c7a8ea153c95ec5a72cb2b1746fc7a06490ddN
- Size
  
  122KB
- MD5
  
  f2c26f31cb704973e8d0304c87884450
- SHA1
  
  51b4cba6726d07c6c4cce60fe66ea4e7c382efbb
- SHA256
  
  f6bf553b80a2caec2d0a9f295f7c7a8ea153c95ec5a72cb2b1746fc7a06490dd
- SHA512
  
  25fa678e86a4a81e4c9f50f348ba48a97d6212ea7ca8f5f90690f7789548c9ab607424b95167f7739edeab5819b236a1c08319bc0960e53766dba11aed5f7d9c
- SSDEEP
  
  1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4N:6u8ANCUdgfmD7zey0KUj6TjR9i4N
Score

10^/10

discovery evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Network Share Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion