8e67c32b0d6aa9a29acbcf120e22cf2392f45f2dd818acbc2e2266b9fd8f9c57 | Triage

Sharing

General

Target

8e67c32b0d6aa9a29acbcf120e22cf2392f45f2dd818acbc2e2266b9fd8f9c57
Size

1.0MB
Sample

231002-2a8xdsfa3x
MD5

195d7367c95df57cd96710c0bf5abd88
SHA1

b7db8c24ec3e8f499ba7d3ea3701bcffad6c82c6
SHA256

8e67c32b0d6aa9a29acbcf120e22cf2392f45f2dd818acbc2e2266b9fd8f9c57
SHA512

53c3e33366881723e53a7a1e243bb5933e13d838c55556ce691fc76d752b453422942695196129387829b19da3d233265f733b720ed8b36378a1361c29694273
SSDEEP

24576:FXU09t8XLX8hf6VAYCG6WouT8wazUzcH0:FEutzfsCG5h9azU

Score

8^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  8e67c32b0d6aa9a29acbcf120e22cf2392f45f2dd818acbc2e2266b9fd8f9c57
- Size
  
  1.0MB
- MD5
  
  195d7367c95df57cd96710c0bf5abd88
- SHA1
  
  b7db8c24ec3e8f499ba7d3ea3701bcffad6c82c6
- SHA256
  
  8e67c32b0d6aa9a29acbcf120e22cf2392f45f2dd818acbc2e2266b9fd8f9c57
- SHA512
  
  53c3e33366881723e53a7a1e243bb5933e13d838c55556ce691fc76d752b453422942695196129387829b19da3d233265f733b720ed8b36378a1361c29694273
- SSDEEP
  
  24576:FXU09t8XLX8hf6VAYCG6WouT8wazUzcH0:FEutzfsCG5h9azU
Score

8^/10

evasion discovery persistence
- Modifies Windows Firewall
  evasion
- Sets file execution options in registry
  persistence
- Stops running service(s)
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

File and Directory Permissions Modification

Impair Defenses

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

behavioral2

discoveryevasionpersistence