fbca317a26e664bb927b7d2cd7c5503eb94bb02ac539ae0d50c3bfa7eefd8c3d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KMSAuto Net.exe
Size

6.6MB
Sample

240221-mflxgsea2z
MD5

69d0ee2a1e6746241a13721dd515ef81
SHA1

a82c168fd2badecfff3bfe3c5eb5e7029637a7d1
SHA256

fbca317a26e664bb927b7d2cd7c5503eb94bb02ac539ae0d50c3bfa7eefd8c3d
SHA512

dfd27c1ff4f3cc2355deaa15988acad69c2aab9fff038220bcf52f2730594acf80da0161a0b23a1cab0b9f432145fbc7acd8e4f3703c1af2234e30768060a5ed
SSDEEP

196608:DywBGqyw15cywuywQyw8ywlywLywRX5yw9lywfywEywFyw5ywwywmIBywyywrywb:GwBGnw1zwjwNwhwIwuwRX0w9IwqwJwoT

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  KMSAuto Net.exe
- Size
  
  6.6MB
- MD5
  
  69d0ee2a1e6746241a13721dd515ef81
- SHA1
  
  a82c168fd2badecfff3bfe3c5eb5e7029637a7d1
- SHA256
  
  fbca317a26e664bb927b7d2cd7c5503eb94bb02ac539ae0d50c3bfa7eefd8c3d
- SHA512
  
  dfd27c1ff4f3cc2355deaa15988acad69c2aab9fff038220bcf52f2730594acf80da0161a0b23a1cab0b9f432145fbc7acd8e4f3703c1af2234e30768060a5ed
- SSDEEP
  
  196608:DywBGqyw15cywuywQyw8ywlywLywRX5yw9lywfywEywFyw5ywwywmIBywyywrywb:GwBGnw1zwjwNwhwIwuwRX0w9IwqwJwoT
Score

8^/10

evasion persistence
- Creates new service(s)
  persistence
- Modifies Windows Firewall
  evasion
- Sets service image path in registry
  persistence
- Stops running service(s)
  evasion
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionpersistence

behavioral2