laplas | b90c565fb5fa3040dfae1345217f0b39af3657fcd766d3d0c5783d781c58f85e | Triage

Sharing

General

Target

2025-03-14_39d14dc9bb4b9a732f1002f6cde45532_frostygoop_gcleaner_poet-rat_sliver_snatch
Size

4.0MB
Sample

250314-a551faxtdw
MD5

39d14dc9bb4b9a732f1002f6cde45532
SHA1

1521eea1f580f920da11cb54b30ffa9667d41559
SHA256

b90c565fb5fa3040dfae1345217f0b39af3657fcd766d3d0c5783d781c58f85e
SHA512

8320974fc438a83a5f6f1a78caa026d755617711380a48e487aef0cf4a2fb193ff277c47e3fce933185b3d9514ccaeef0565e5954a1d05e4889c499d96cdfb64
SSDEEP

49152:L00qkbv9q7FuoqqWMaZXTN2dUfY3ngTgjUHN+x8gPCm5cCiiDTBD0B1Hk:o1kbY3gT0j/cCiiDTqk

Score

10^/10

laplas discovery

Malware Config

Targets

- Target
  
  2025-03-14_39d14dc9bb4b9a732f1002f6cde45532_frostygoop_gcleaner_poet-rat_sliver_snatch
- Size
  
  4.0MB
- MD5
  
  39d14dc9bb4b9a732f1002f6cde45532
- SHA1
  
  1521eea1f580f920da11cb54b30ffa9667d41559
- SHA256
  
  b90c565fb5fa3040dfae1345217f0b39af3657fcd766d3d0c5783d781c58f85e
- SHA512
  
  8320974fc438a83a5f6f1a78caa026d755617711380a48e487aef0cf4a2fb193ff277c47e3fce933185b3d9514ccaeef0565e5954a1d05e4889c499d96cdfb64
- SSDEEP
  
  49152:L00qkbv9q7FuoqqWMaZXTN2dUfY3ngTgjUHN+x8gPCm5cCiiDTBD0B1Hk:o1kbY3gT0j/cCiiDTqk
Score

7^/10

discovery
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Scheduled Task/Job

Scheduled Task

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2