824fa544821a28b51ee3d5157761d383645636db90cd1ac3f9a34d3bc9963fad | Triage

Sharing

General

Target

d3917af0432540bc9b405ed87b69c6e1
Size

15KB
Sample

240318-p6xssahh9s
MD5

d3917af0432540bc9b405ed87b69c6e1
SHA1

6ea20ff921431b740b076b97e8950bc72f9a45c1
SHA256

824fa544821a28b51ee3d5157761d383645636db90cd1ac3f9a34d3bc9963fad
SHA512

976e9c7bf9b71c4c5338bd3ae0b34d1d5d9fee738100380bbea0bc96abb261655434312d79b153c553124008fd84cc246b3ca44b0805287316fca94bbbde2051
SSDEEP

384:9mgss1W8twKo0fMqbnApRUvaD6Gad0qXTh3bh:sgHXtvZEqbApRGjBNV3b

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  d3917af0432540bc9b405ed87b69c6e1
- Size
  
  15KB
- MD5
  
  d3917af0432540bc9b405ed87b69c6e1
- SHA1
  
  6ea20ff921431b740b076b97e8950bc72f9a45c1
- SHA256
  
  824fa544821a28b51ee3d5157761d383645636db90cd1ac3f9a34d3bc9963fad
- SHA512
  
  976e9c7bf9b71c4c5338bd3ae0b34d1d5d9fee738100380bbea0bc96abb261655434312d79b153c553124008fd84cc246b3ca44b0805287316fca94bbbde2051
- SSDEEP
  
  384:9mgss1W8twKo0fMqbnApRUvaD6Gad0qXTh3bh:sgHXtvZEqbApRGjBNV3b
Score

10^/10

evasion trojan
- Modifies firewall policy service
  evasion
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2