1b96996e7da56619945fbc5bc29df0d5c60719cc5dcc63646e79ab5474e3b37f | Triage

Sharing

General

Target

1b96996e7da56619945fbc5bc29df0d5c60719cc5dcc63646e79ab5474e3b37f
Size

9.1MB
Sample

230820-z9l6kabb7s
MD5

be6316296ea8eb5f9326f85e455dd2be
SHA1

6c3c735fd9f352d165039ba09ee88b4e7a9b357f
SHA256

1b96996e7da56619945fbc5bc29df0d5c60719cc5dcc63646e79ab5474e3b37f
SHA512

9f5eca80461bf2eea5bbd644c5ccd40cc228ba0aded4d318540bf1529654d682d525f4df0fdbe23d643fbf679c3a2f0c92a0b7f3bc886c09c19f23873531c137
SSDEEP

98304:HxpgplG4v7N1vCjbpCa/tX1svhcHFgLcWE/HVgFjxG7Ex5qHemj5v/qBg7/GIM7F:I/VCUvKrWEWFI5j0A/GR

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  1b96996e7da56619945fbc5bc29df0d5c60719cc5dcc63646e79ab5474e3b37f
- Size
  
  9.1MB
- MD5
  
  be6316296ea8eb5f9326f85e455dd2be
- SHA1
  
  6c3c735fd9f352d165039ba09ee88b4e7a9b357f
- SHA256
  
  1b96996e7da56619945fbc5bc29df0d5c60719cc5dcc63646e79ab5474e3b37f
- SHA512
  
  9f5eca80461bf2eea5bbd644c5ccd40cc228ba0aded4d318540bf1529654d682d525f4df0fdbe23d643fbf679c3a2f0c92a0b7f3bc886c09c19f23873531c137
- SSDEEP
  
  98304:HxpgplG4v7N1vCjbpCa/tX1svhcHFgLcWE/HVgFjxG7Ex5qHemj5v/qBg7/GIM7F:I/VCUvKrWEWFI5j0A/GR
Score

8^/10

evasion
- Modifies Windows Firewall
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2