336e0323e0a9004fd9ea30eb348d0b669ed70c7a61c77c51d6485525e03d535d | Triage

Sharing

General

Target

cd9ccb3e7af60cb025e7b219fa417028
Size

379KB
Sample

240316-kng76ahd84
MD5

cd9ccb3e7af60cb025e7b219fa417028
SHA1

17c91cb6345a5d37330ba73305f546166114fe2e
SHA256

336e0323e0a9004fd9ea30eb348d0b669ed70c7a61c77c51d6485525e03d535d
SHA512

b0b85789a9160c2974063169b20c2f7add837aa244449c4c0cfcddddb6d0e579caa35f4a95526b05b34197fd4d4566a8a878bb123a83763a2b9b320489e79ee2
SSDEEP

6144:Sg0Vb/ZPiiFvbPidy5tgsLzpBNWP1ZCOLkErCaehJou58o3jo4eVH:wbhPii5iyxLzNsZxLkHhJpqo3hep

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  cd9ccb3e7af60cb025e7b219fa417028
- Size
  
  379KB
- MD5
  
  cd9ccb3e7af60cb025e7b219fa417028
- SHA1
  
  17c91cb6345a5d37330ba73305f546166114fe2e
- SHA256
  
  336e0323e0a9004fd9ea30eb348d0b669ed70c7a61c77c51d6485525e03d535d
- SHA512
  
  b0b85789a9160c2974063169b20c2f7add837aa244449c4c0cfcddddb6d0e579caa35f4a95526b05b34197fd4d4566a8a878bb123a83763a2b9b320489e79ee2
- SSDEEP
  
  6144:Sg0Vb/ZPiiFvbPidy5tgsLzpBNWP1ZCOLkErCaehJou58o3jo4eVH:wbhPii5iyxLzNsZxLkHhJpqo3hep
Score

10^/10

evasion persistence
- Modifies firewall policy service
  evasion
- Modifies Windows Firewall
  evasion
- Stops running service(s)
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence