3c28db7d5274460189167458e4120cc0fd607e2a63d94b0e1004f37049f63a62 | Triage

Sharing

General

Target

3c28db7d5274460189167458e4120cc0fd607e2a63d94b0e1004f37049f63a62
Size

630KB
Sample

241121-2z8b6awpdm
MD5

de428e3a7d4d7ef369f524d81ab63f3b
SHA1

175cf1088027980a6ea136487e0af8ef38d21e16
SHA256

3c28db7d5274460189167458e4120cc0fd607e2a63d94b0e1004f37049f63a62
SHA512

e46c3715e31f9c24454ccda981f1711128361e018f2dfbfe65ae0e9836f1313e52ecb6560c6d2bf84708f6a561dcdbf5a5905c788f76f48496eeb53aa52a0c21
SSDEEP

12288:PFUNDaM85s/AxkQ4xdv3yNIGlSYjjlrg+aaUX:PFOahs4xkQ4DvCNIGl3jjZg+XK

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  3c28db7d5274460189167458e4120cc0fd607e2a63d94b0e1004f37049f63a62
- Size
  
  630KB
- MD5
  
  de428e3a7d4d7ef369f524d81ab63f3b
- SHA1
  
  175cf1088027980a6ea136487e0af8ef38d21e16
- SHA256
  
  3c28db7d5274460189167458e4120cc0fd607e2a63d94b0e1004f37049f63a62
- SHA512
  
  e46c3715e31f9c24454ccda981f1711128361e018f2dfbfe65ae0e9836f1313e52ecb6560c6d2bf84708f6a561dcdbf5a5905c788f76f48496eeb53aa52a0c21
- SSDEEP
  
  12288:PFUNDaM85s/AxkQ4xdv3yNIGlSYjjlrg+aaUX:PFOahs4xkQ4DvCNIGl3jjZg+XK
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence