77b16a14310e2eaa1b23fc65243f4e06b1b5c6f2108d393b27777c790c96683b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d799480f6a39fa4bdfaa0a366cb9f40d
Size

83KB
Sample

240320-b33mzadf26
MD5

d799480f6a39fa4bdfaa0a366cb9f40d
SHA1

00c028d714712bc902365d739529303966342e04
SHA256

77b16a14310e2eaa1b23fc65243f4e06b1b5c6f2108d393b27777c790c96683b
SHA512

c3f3783939b49fba2826bf5b4f96595f5acfd82c2dde59b41cf5e7092777460de8d4a54056b9fecd81965768410f9ceac8a868020ce0760d0ba980a42af7ec43
SSDEEP

1536:CHUO97Ch2l45gCwrulzkBIrIeDYDrst+tYVueSyLrK4:0Uvt5gVylxNhSyC

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  d799480f6a39fa4bdfaa0a366cb9f40d
- Size
  
  83KB
- MD5
  
  d799480f6a39fa4bdfaa0a366cb9f40d
- SHA1
  
  00c028d714712bc902365d739529303966342e04
- SHA256
  
  77b16a14310e2eaa1b23fc65243f4e06b1b5c6f2108d393b27777c790c96683b
- SHA512
  
  c3f3783939b49fba2826bf5b4f96595f5acfd82c2dde59b41cf5e7092777460de8d4a54056b9fecd81965768410f9ceac8a868020ce0760d0ba980a42af7ec43
- SSDEEP
  
  1536:CHUO97Ch2l45gCwrulzkBIrIeDYDrst+tYVueSyLrK4:0Uvt5gVylxNhSyC
Score

8^/10

evasion
- Blocklisted process makes network request
- Modifies Windows Firewall
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2