Overview

overview

10

Static

static

fatality.exe

windows7-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fatality.rar

  • Size

    4.4MB

  • Sample

    221123-vdjcksgf96

  • MD5

    0a668a17b820bb20065e8e979cea7b39

  • SHA1

    b0607dbb2b3da5293f9465cf3143882873786ce0

  • SHA256

    c019c0bfca1472b8ebdf79019f2b0e70f98e4955912f7ae7e3a89c35fddd3c36

  • SHA512

    153293881d12e3bb7274117ba99349121ff1b61a8e3e5584b38c8946c4b85671c8ac5b1046b0576b145ce33cd71e97c1012a5210865f1e6ba9eef4f190626ffa

  • SSDEEP

    98304:RdfzH1yqETZyhMHXx1bYQih4moE7GCLKIOwZKc:nzH1yqETZyhMHBNYD4t/ClOrc

Score
10/10
discoveryevasionexploit

Malware Config

Targets

    • Target

      fatality.exe

    • Size

      4.4MB

    • MD5

      96730495621816d6e5082a95574bd9d5

    • SHA1

      b62168945da2966f4c4122f49df0e0ba5751ec0a

    • SHA256

      e7ea0aaed1c2dea3cda5661fd66693909f63f1978bf07d25d90e6a5cfd310ef0

    • SHA512

      a7ea21f0b8501ea0e00b6f01c6b2ea433f34129e1379e5ba877d81d1be15e9c128c3b4c7f911241ca82d14dbd8aacaf0f03d919a77826074c0ce2f57216d80b1

    • SSDEEP

      98304:hU4R+GsvqbiXke/i06xLTDqGg9hGzkI5GYsgd1N9RZxxlgu:uOmvqbiU0iDZTDI9AzkI56gdz9RXL

    Score
    10/10
    discoveryevasionexploit

    • Modifies security service

      evasion

    • Possible privilege escalation attempt

      exploit

    • Stops running service(s)

      evasion

    • Modifies file permissions

      discovery

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

2
T1031

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Impair Defenses

1
T1562

File Permissions Modification

1
T1222

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Service Stop

1
T1489

Tasks