General

  • Target

    8ad56d965c77dc444335382205bf3cd4

  • Size

    12KB

  • Sample

    240202-3qzt4aedbr

  • MD5

    8ad56d965c77dc444335382205bf3cd4

  • SHA1

    f04fb931add7762acf37d822c286c5f62fb4197c

  • SHA256

    f2925cf8831a6a594787302fdd81e4789b32a3be98ab3e741f703f6c5933d379

  • SHA512

    bfcee6d3081af8953f5653bd7f6e4cd0f9a573530ab5db36068426cabd4edd8a034375c6f66debbe39fb2ed7ca8046c5b7b96823ee8e1ebc00d8b411014739c9

  • SSDEEP

    192:mwmsF0M55DToSJ8uhCoyCxng3k8s2QaKeTkBU2Pw6iFVSwjLX39vUcGLIoB:jmtWJToSrE80QaK6kBUX08KL

Malware Config

Targets

    • Target

      8ad56d965c77dc444335382205bf3cd4

    • Size

      12KB

    • MD5

      8ad56d965c77dc444335382205bf3cd4

    • SHA1

      f04fb931add7762acf37d822c286c5f62fb4197c

    • SHA256

      f2925cf8831a6a594787302fdd81e4789b32a3be98ab3e741f703f6c5933d379

    • SHA512

      bfcee6d3081af8953f5653bd7f6e4cd0f9a573530ab5db36068426cabd4edd8a034375c6f66debbe39fb2ed7ca8046c5b7b96823ee8e1ebc00d8b411014739c9

    • SSDEEP

      192:mwmsF0M55DToSJ8uhCoyCxng3k8s2QaKeTkBU2Pw6iFVSwjLX39vUcGLIoB:jmtWJToSrE80QaK6kBUX08KL

    • Creates new service(s)

    • Modifies Windows Firewall

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Create or Modify System Process

2
T1543

Windows Service

2
T1543.003

Privilege Escalation

Create or Modify System Process

2
T1543

Windows Service

2
T1543.003

Defense Evasion

Impair Defenses

1
T1562

Disable or Modify System Firewall

1
T1562.004

Tasks