46154c0c670ecd7b9a9966fef17352e80366371a5c7240617b0c416ef18b4c49 | Triage

Sharing

General

Target

46154c0c670ecd7b9a9966fef17352e80366371a5c7240617b0c416ef18b4c49N
Size

1.7MB
Sample

241010-p8648ssbnm
MD5

13b9675d1e67b8cc1c401038647535d0
SHA1

b0d760d490932040490748ed641b245c90a0245a
SHA256

46154c0c670ecd7b9a9966fef17352e80366371a5c7240617b0c416ef18b4c49
SHA512

d2752cfe32df336a4602120b5b5b52d006137547a0aad4718ff85ff0c955946b8f88711bf61ee4d1841968927bfaa36e8428523c83f36297b334c518f0753167
SSDEEP

49152:tnsExITYbNbNWo4kSH3OqtwI6V6dRPaRWLT:RsExIT4bNJFY3Oqt1d1eWLT

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  46154c0c670ecd7b9a9966fef17352e80366371a5c7240617b0c416ef18b4c49N
- Size
  
  1.7MB
- MD5
  
  13b9675d1e67b8cc1c401038647535d0
- SHA1
  
  b0d760d490932040490748ed641b245c90a0245a
- SHA256
  
  46154c0c670ecd7b9a9966fef17352e80366371a5c7240617b0c416ef18b4c49
- SHA512
  
  d2752cfe32df336a4602120b5b5b52d006137547a0aad4718ff85ff0c955946b8f88711bf61ee4d1841968927bfaa36e8428523c83f36297b334c518f0753167
- SSDEEP
  
  49152:tnsExITYbNbNWo4kSH3OqtwI6V6dRPaRWLT:RsExIT4bNJFY3Oqt1d1eWLT
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence