16bef0a8ced602ca78b0eaa8e9246adbdf830fb3a8b3a0c52fc8e4a225eb0f85 | Triage

Sharing

General

Target

NEAS.aa3fe0372d4f77990069385f706966d0.exe
Size

288KB
Sample

231117-a3wnzsde4s
MD5

aa3fe0372d4f77990069385f706966d0
SHA1

88eca00b9c4d88a5f4b89b519944b19aa099fcb0
SHA256

16bef0a8ced602ca78b0eaa8e9246adbdf830fb3a8b3a0c52fc8e4a225eb0f85
SHA512

3971cc3514d48938595112b872857929a515b0aefe1662b152edfd32c9d9a36f2f61661945f43f3fce0cc2468d83c292380e497e2313a0e8c0e545456c9a0e78
SSDEEP

3072:SbsNreBPabLVyAgZeE8arYX35BVYOhXDcl3MSjewQqGffLfmYORoLoY46VroPJzj:RJPV3narYXpBVbhY6SeXlohbVos

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  NEAS.aa3fe0372d4f77990069385f706966d0.exe
- Size
  
  288KB
- MD5
  
  aa3fe0372d4f77990069385f706966d0
- SHA1
  
  88eca00b9c4d88a5f4b89b519944b19aa099fcb0
- SHA256
  
  16bef0a8ced602ca78b0eaa8e9246adbdf830fb3a8b3a0c52fc8e4a225eb0f85
- SHA512
  
  3971cc3514d48938595112b872857929a515b0aefe1662b152edfd32c9d9a36f2f61661945f43f3fce0cc2468d83c292380e497e2313a0e8c0e545456c9a0e78
- SSDEEP
  
  3072:SbsNreBPabLVyAgZeE8arYX35BVYOhXDcl3MSjewQqGffLfmYORoLoY46VroPJzj:RJPV3narYXpBVbhY6SeXlohbVos
Score

8^/10

evasion
- Modifies Windows Firewall
  evasion
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2