21865f37dd2347dcda29a3bf2aad9ee884e09e73b70b68dcf4c8ad1f9b278942 | Triage

Sharing

General

Target

setup.exe
Size

3.3MB
Sample

240223-mcp5qsfb83
MD5

673b7d2b10cd9a444dfceeec4130aa01
SHA1

666e31eb08705845e3d2ee5e4d9f2042ce54833c
SHA256

21865f37dd2347dcda29a3bf2aad9ee884e09e73b70b68dcf4c8ad1f9b278942
SHA512

871bb37375dd1896793308a1f7b0d46bf92e75f16fae924dc5b7038109b1ae8f6fcdad0e8741e3ba2229eec5450490e293fe9ed8cc276a678726dd033ea53a05
SSDEEP

98304:N1FxXqnAum/Er6xfBuLLBGShujM88MsZSYGqwDViz:nFxX8Aum/4qexgo0qSM

Score

6^/10

discovery evasion

Malware Config

Targets

- Target
  
  setup.exe
- Size
  
  3.3MB
- MD5
  
  673b7d2b10cd9a444dfceeec4130aa01
- SHA1
  
  666e31eb08705845e3d2ee5e4d9f2042ce54833c
- SHA256
  
  21865f37dd2347dcda29a3bf2aad9ee884e09e73b70b68dcf4c8ad1f9b278942
- SHA512
  
  871bb37375dd1896793308a1f7b0d46bf92e75f16fae924dc5b7038109b1ae8f6fcdad0e8741e3ba2229eec5450490e293fe9ed8cc276a678726dd033ea53a05
- SSDEEP
  
  98304:N1FxXqnAum/Er6xfBuLLBGShujM88MsZSYGqwDViz:nFxX8Aum/4qexgo0qSM
Score

6^/10

discovery evasion
- Modifies Windows Firewall
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2