2c46089dd57446d195f426d5e1a22a39bdf83be28a88f535c881144ebc6b3f09 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89563767600b8edd219bc70883516abe
Size

96KB
Sample

240202-m2kasaedfl
MD5

89563767600b8edd219bc70883516abe
SHA1

a56766c76a865e1cc8032e474eb0088433db7e11
SHA256

2c46089dd57446d195f426d5e1a22a39bdf83be28a88f535c881144ebc6b3f09
SHA512

1f1b49ba7c8f8dc15798734bdfd6bee7a5967fba3a99efebe3b09f303a045e9c1543e75d31eb68ba46525532c07003ee237b490b99109eaf7bd51581099d5c0f
SSDEEP

1536:PTqaxQsuu+iD8JS1Va3d0dPnL1jeetUSe2CHv4ZhNDWlifVrayP:dxzuuV8cVayL1dte3Hv4HRWwdrx

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  89563767600b8edd219bc70883516abe
- Size
  
  96KB
- MD5
  
  89563767600b8edd219bc70883516abe
- SHA1
  
  a56766c76a865e1cc8032e474eb0088433db7e11
- SHA256
  
  2c46089dd57446d195f426d5e1a22a39bdf83be28a88f535c881144ebc6b3f09
- SHA512
  
  1f1b49ba7c8f8dc15798734bdfd6bee7a5967fba3a99efebe3b09f303a045e9c1543e75d31eb68ba46525532c07003ee237b490b99109eaf7bd51581099d5c0f
- SSDEEP
  
  1536:PTqaxQsuu+iD8JS1Va3d0dPnL1jeetUSe2CHv4ZhNDWlifVrayP:dxzuuV8cVayL1dte3Hv4HRWwdrx
Score

10^/10

evasion
- Modifies firewall policy service
  evasion
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2