6beb5261404f30d097d40adfc431334a431e4c7f0378fba5d14387ade7d7ecd5 | Triage

Sharing

General

Target

icsys.icn.exe
Size

135KB
Sample

241122-m9189svqhp
MD5

df0a34b2c6ac70dfe57018f98866e4e7
SHA1

bc7a21fdc0c51ffee545833eb1769612cbd16918
SHA256

6beb5261404f30d097d40adfc431334a431e4c7f0378fba5d14387ade7d7ecd5
SHA512

d0a0e70b76b584cf63251a866888980ae19334b2cc89ef6aaa13c7aea18fbc9195300dee3f7a69933f150a4c82820b7eb8a8e2aa26f90ef940ea3de8ed5d65af
SSDEEP

1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVXJ:UVqoCl/YgjxEufVU0TbTyDDalRJ

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  icsys.icn.exe
- Size
  
  135KB
- MD5
  
  df0a34b2c6ac70dfe57018f98866e4e7
- SHA1
  
  bc7a21fdc0c51ffee545833eb1769612cbd16918
- SHA256
  
  6beb5261404f30d097d40adfc431334a431e4c7f0378fba5d14387ade7d7ecd5
- SHA512
  
  d0a0e70b76b584cf63251a866888980ae19334b2cc89ef6aaa13c7aea18fbc9195300dee3f7a69933f150a4c82820b7eb8a8e2aa26f90ef940ea3de8ed5d65af
- SSDEEP
  
  1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVXJ:UVqoCl/YgjxEufVU0TbTyDDalRJ
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence