25e9a920e26c0649fa67cd6077c90a448ab6f852a69e509922531a3f87bc9cf2 | Triage

Sharing

General

Target

destroy.exe
Size

1.2MB
Sample

230819-z1nm2acd73
MD5

e158a46ff5953819ae7d2dec7be5e320
SHA1

e41de85d2030c374d91ab394deb9cfc5125e8a57
SHA256

25e9a920e26c0649fa67cd6077c90a448ab6f852a69e509922531a3f87bc9cf2
SHA512

b98d8053128e3fd9fb6dfaf2213b1cc91580594ee7d5c0c3bdcaaaa45c0dfd7e22acc6a3d07402ba6b0ace9ebe783efdeff7413362c88736c557f4f1077b4f26
SSDEEP

24576:zdofGAmSIQ177wZ+A7MjiiRDXU/Sat5RgsLSmIOHsU5zMmX1xYwncqKvGq9TV:zdofGbSIQ177wZvYjiiRDXASat5RgsLG

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  destroy.exe
- Size
  
  1.2MB
- MD5
  
  e158a46ff5953819ae7d2dec7be5e320
- SHA1
  
  e41de85d2030c374d91ab394deb9cfc5125e8a57
- SHA256
  
  25e9a920e26c0649fa67cd6077c90a448ab6f852a69e509922531a3f87bc9cf2
- SHA512
  
  b98d8053128e3fd9fb6dfaf2213b1cc91580594ee7d5c0c3bdcaaaa45c0dfd7e22acc6a3d07402ba6b0ace9ebe783efdeff7413362c88736c557f4f1077b4f26
- SSDEEP
  
  24576:zdofGAmSIQ177wZ+A7MjiiRDXU/Sat5RgsLSmIOHsU5zMmX1xYwncqKvGq9TV:zdofGbSIQ177wZvYjiiRDXASat5RgsLG
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies security service
  evasion
- Sets DLL path for service in the registry
  persistence
- Sets service image path in registry
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence