bada6d6d493416c0992a375de60fe574ced09bef5496ebfac07c19a8b2785494 | Triage

Sharing

General

Target

bada6d6d493416c0992a375de60fe574ced09bef5496ebfac07c19a8b2785494
Size

5.1MB
Sample

220907-yy349sche8
MD5

2438b851e157a3f70bd48af1984b2139
SHA1

105ce31ecdce604bf8629ddc6580f2ad25fc21b5
SHA256

bada6d6d493416c0992a375de60fe574ced09bef5496ebfac07c19a8b2785494
SHA512

ff1ba2eee03a981744434984d431f022afee988745a54d268c39df258502ba57d9880c916050370e351a709ab42928c0a7c3665a7b80b384e9832841e3d76c52
SSDEEP

98304:hoJgPPz4jnKiw6qbse0KZ3U/TUpm9OMtUdvHW4i/6jUH2+9Nx40u:onKl6qgeUoSOdPZi/GUH2QX40u

Score

8^/10

discovery evasion exploit

Malware Config

Targets

- Target
  
  bada6d6d493416c0992a375de60fe574ced09bef5496ebfac07c19a8b2785494
- Size
  
  5.1MB
- MD5
  
  2438b851e157a3f70bd48af1984b2139
- SHA1
  
  105ce31ecdce604bf8629ddc6580f2ad25fc21b5
- SHA256
  
  bada6d6d493416c0992a375de60fe574ced09bef5496ebfac07c19a8b2785494
- SHA512
  
  ff1ba2eee03a981744434984d431f022afee988745a54d268c39df258502ba57d9880c916050370e351a709ab42928c0a7c3665a7b80b384e9832841e3d76c52
- SSDEEP
  
  98304:hoJgPPz4jnKiw6qbse0KZ3U/TUpm9OMtUdvHW4i/6jUH2+9Nx40u:onKl6qgeUoSOdPZi/GUH2QX40u
Score

8^/10

discovery evasion exploit
- Drops file in Drivers directory
- Possible privilege escalation attempt
  exploit
- Stops running service(s)
  evasion
- Modifies file permissions
  discovery
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Impair Defenses

File Permissions Modification

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexploit