375294a3dc682fe2804c58ddbab44a2ae61e39d3c4a02507d937ae6a09334d97 | Triage

Sharing

General

Target

375294a3dc682fe2804c58ddbab44a2ae61e39d3c4a02507d937ae6a09334d97
Size

1.8MB
Sample

220817-16a5kagde7
MD5

6691c3106d5319f108114a48f5177396
SHA1

1ce92f03b5e7bd1c1d591141693f6e0261f3afee
SHA256

375294a3dc682fe2804c58ddbab44a2ae61e39d3c4a02507d937ae6a09334d97
SHA512

19860f3c0479d5bbc5a7ccdaf609d68ec2007480cc8ea4becb5c0457ab4aeacdb6e0fa75e7d274436d5825342321bbb9d49468f3e990460b5b85a430c7ebdba7
SSDEEP

49152:+1rLSuOMv2pORqIwpn3AcRs3gzAiYSWTqP7:K3O02WyDQDDTqP

Score

10^/10

discovery evasion exploit

Malware Config

Targets

- Target
  
  375294a3dc682fe2804c58ddbab44a2ae61e39d3c4a02507d937ae6a09334d97
- Size
  
  1.8MB
- MD5
  
  6691c3106d5319f108114a48f5177396
- SHA1
  
  1ce92f03b5e7bd1c1d591141693f6e0261f3afee
- SHA256
  
  375294a3dc682fe2804c58ddbab44a2ae61e39d3c4a02507d937ae6a09334d97
- SHA512
  
  19860f3c0479d5bbc5a7ccdaf609d68ec2007480cc8ea4becb5c0457ab4aeacdb6e0fa75e7d274436d5825342321bbb9d49468f3e990460b5b85a430c7ebdba7
- SSDEEP
  
  49152:+1rLSuOMv2pORqIwpn3AcRs3gzAiYSWTqP7:K3O02WyDQDDTqP
Score

10^/10

discovery evasion exploit
- Modifies security service
  evasion
- Executes dropped EXE
- Possible privilege escalation attempt
  exploit
- Stops running service(s)
  evasion
- Modifies file permissions
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Modify Existing Service

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

File and Directory Permissions Modification

Impair Defenses

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexploit

behavioral2

discoveryevasionexploit