bbad09382585043cf67322155828dbd47a2b9aa7913ed2c5d4860df676d23348 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbad09382585043cf67322155828dbd47a2b9aa7913ed2c5d4860df676d23348
Size

13.0MB
Sample

231225-rtsz6shhfr
MD5

227b2d1ff139e8d6dde71946c7758c38
SHA1

03b47f16fb2432f9b0e121eeee1ef254ff7b1066
SHA256

bbad09382585043cf67322155828dbd47a2b9aa7913ed2c5d4860df676d23348
SHA512

d3a332cc73a0a84230961c51236bff53f546e6e30d85b729e414c7728b5d30d9e3540ea1a5de5499e90d012a42d216b9118ca18c462cecd3bd802dfc78f8eb1f
SSDEEP

393216:GFlBhUsKKV/IkIJjCrDUgBJb3mL4bso9/:clBhjKo/TIJjCf3mL4R

Score

8^/10

discovery evasion

Malware Config

Targets

- Target
  
  bbad09382585043cf67322155828dbd47a2b9aa7913ed2c5d4860df676d23348
- Size
  
  13.0MB
- MD5
  
  227b2d1ff139e8d6dde71946c7758c38
- SHA1
  
  03b47f16fb2432f9b0e121eeee1ef254ff7b1066
- SHA256
  
  bbad09382585043cf67322155828dbd47a2b9aa7913ed2c5d4860df676d23348
- SHA512
  
  d3a332cc73a0a84230961c51236bff53f546e6e30d85b729e414c7728b5d30d9e3540ea1a5de5499e90d012a42d216b9118ca18c462cecd3bd802dfc78f8eb1f
- SSDEEP
  
  393216:GFlBhUsKKV/IkIJjCrDUgBJb3mL4bso9/:clBhjKo/TIJjCf3mL4R
Score

8^/10

discovery evasion
- Stops running service(s)
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion