3c3716814480e4d811c5b83efbd55a32454d0a5d090caa1ee4f2176ed475ed91 | Triage

Sharing

General

Target

3c3716814480e4d811c5b83efbd55a32454d0a5d090caa1ee4f2176ed475ed91N.exe
Size

207KB
Sample

250120-latvgasmhl
MD5

5eeb32580397170c9042578c10851cb0
SHA1

06464f5ef2e8666e33b92d8f4759368734ef89be
SHA256

3c3716814480e4d811c5b83efbd55a32454d0a5d090caa1ee4f2176ed475ed91
SHA512

d93a47b32dd77e14a9e64a0db7566dc473048c68263a25a334ffa8fb087705e615b7d3c33c9145f1828f8c609e37c43bc309bd4265dd03bab19d808bf210a648
SSDEEP

1536:/fsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbJd+:/VqoCl/YgjxEufVU0TbTyDDalb+

Score

10^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  3c3716814480e4d811c5b83efbd55a32454d0a5d090caa1ee4f2176ed475ed91N.exe
- Size
  
  207KB
- MD5
  
  5eeb32580397170c9042578c10851cb0
- SHA1
  
  06464f5ef2e8666e33b92d8f4759368734ef89be
- SHA256
  
  3c3716814480e4d811c5b83efbd55a32454d0a5d090caa1ee4f2176ed475ed91
- SHA512
  
  d93a47b32dd77e14a9e64a0db7566dc473048c68263a25a334ffa8fb087705e615b7d3c33c9145f1828f8c609e37c43bc309bd4265dd03bab19d808bf210a648
- SSDEEP
  
  1536:/fsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbJd+:/VqoCl/YgjxEufVU0TbTyDDalb+
Score

10^/10

discovery evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence