326b669abea961fc473bc010010cb96524bcfb5519157e55700a80f067a6d8af | Triage

Sharing

General

Target

27a0db1e476d5f99524225521dce569e
Size

52KB
Sample

231231-er24vagehn
MD5

27a0db1e476d5f99524225521dce569e
SHA1

ff30d543951d7d33a8ba415945ff1b973d169e0e
SHA256

326b669abea961fc473bc010010cb96524bcfb5519157e55700a80f067a6d8af
SHA512

2864645a2e7ff65253a0cda2f3e766e6619c14f6fb08e32b9bc471a92deb92d069ccd53d2ff73a13b656d9cca378d406f620091f62d8272062ed62c133920e06
SSDEEP

768:C96E8n34lzc8VoE4tytrPsSm9vt51r4lzc6E8n3:Cw4Bc8+stAHl51r4Bc

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  27a0db1e476d5f99524225521dce569e
- Size
  
  52KB
- MD5
  
  27a0db1e476d5f99524225521dce569e
- SHA1
  
  ff30d543951d7d33a8ba415945ff1b973d169e0e
- SHA256
  
  326b669abea961fc473bc010010cb96524bcfb5519157e55700a80f067a6d8af
- SHA512
  
  2864645a2e7ff65253a0cda2f3e766e6619c14f6fb08e32b9bc471a92deb92d069ccd53d2ff73a13b656d9cca378d406f620091f62d8272062ed62c133920e06
- SSDEEP
  
  768:C96E8n34lzc8VoE4tytrPsSm9vt51r4lzc6E8n3:Cw4Bc8+stAHl51r4Bc
Score

8^/10

evasion
- Stops running service(s)
  evasion
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

behavioral2