004ad3b3b39929ff92ca907c2e1c60aa97de7e01294c8ecd7a9075dc8bd05774 | Triage

Sharing

General

Target

004ad3b3b39929ff92ca907c2e1c60aa97de7e01294c8ecd7a9075dc8bd05774.exe
Size

80KB
Sample

241122-k7kgmaxrfs
MD5

4df0bd75bc2d7a1da733327698a2aeb2
SHA1

bfeb0e7bb139543820f458a6f3fae91e3650e2d4
SHA256

004ad3b3b39929ff92ca907c2e1c60aa97de7e01294c8ecd7a9075dc8bd05774
SHA512

b985c38269b23d6c18efac36a83389aa2cc43c3b5acbe405060978d179e4a26d8747c6730660ba34f70b7ec634e6f2c53b37bad5c65e1c6f939540372c61e595
SSDEEP

768:MpQNwC3BESe4Vqth+0V5vKwQNwC3BE3bqNmCRh5EMC:keT7BVwxfv9eTAGv5zC

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  004ad3b3b39929ff92ca907c2e1c60aa97de7e01294c8ecd7a9075dc8bd05774.exe
- Size
  
  80KB
- MD5
  
  4df0bd75bc2d7a1da733327698a2aeb2
- SHA1
  
  bfeb0e7bb139543820f458a6f3fae91e3650e2d4
- SHA256
  
  004ad3b3b39929ff92ca907c2e1c60aa97de7e01294c8ecd7a9075dc8bd05774
- SHA512
  
  b985c38269b23d6c18efac36a83389aa2cc43c3b5acbe405060978d179e4a26d8747c6730660ba34f70b7ec634e6f2c53b37bad5c65e1c6f939540372c61e595
- SSDEEP
  
  768:MpQNwC3BESe4Vqth+0V5vKwQNwC3BE3bqNmCRh5EMC:keT7BVwxfv9eTAGv5zC
Score

10^/10

discovery evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Network Share Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion