4b4a87552c44158fb53a72c7294319b0ddde9f99f460425ad5997d3b9121cd1e | Triage

Resubmissions

15-12-2024 15:31

241215-syg9xaykdx 8

15-12-2024 08:28

241215-kc625synes 10

Sharing

General

Target

fccd129f6a5b9d2133d14922a3614f02.dll
Size

206KB
Sample

241215-syg9xaykdx
MD5

fccd129f6a5b9d2133d14922a3614f02
SHA1

e814c637e6f0c21f3aa9b43fb92cb161b4d451fc
SHA256

4b4a87552c44158fb53a72c7294319b0ddde9f99f460425ad5997d3b9121cd1e
SHA512

c1594504053bbe2b061880d1ff69819eca8bdd2bc882b74f415ff8a1515389e32b8d7cd1b931d65b042247fd05df1751a000d6da4219427b74e9cdb0e0e52979
SSDEEP

3072:4pEegLluZoATP/QGdqlhNFIkiFnZDJVvU1nSXZOAg0Fuj0pJgOgpQkV+tpMEaE:4pDyp2AQq3FWFnRehAOXpQkY7MY

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  
  fccd129f6a5b9d2133d14922a3614f02.dll
- Size
  
  206KB
- MD5
  
  fccd129f6a5b9d2133d14922a3614f02
- SHA1
  
  e814c637e6f0c21f3aa9b43fb92cb161b4d451fc
- SHA256
  
  4b4a87552c44158fb53a72c7294319b0ddde9f99f460425ad5997d3b9121cd1e
- SHA512
  
  c1594504053bbe2b061880d1ff69819eca8bdd2bc882b74f415ff8a1515389e32b8d7cd1b931d65b042247fd05df1751a000d6da4219427b74e9cdb0e0e52979
- SSDEEP
  
  3072:4pEegLluZoATP/QGdqlhNFIkiFnZDJVvU1nSXZOAg0Fuj0pJgOgpQkV+tpMEaE:4pDyp2AQq3FWFnRehAOXpQkY7MY
Score

8^/10

discovery execution
- Blocklisted process makes network request
- Command and Scripting Interpreter: PowerShell
  Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
  execution
- Downloads MZ/PE file
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecution