8ccd1b1552efac01e2282ee2c4817de8f0142175c72fd8cedd9951053612b1cc | Triage

Sharing

General

Target

Telemetry Disabler Level 1.cmd
Size

7KB
Sample

240511-vj9fysge6x
MD5

23def6ada8fe3c24a411b5c12e0a2c39
SHA1

2678083236ed57b864fecb1ae58336bd7c682ddc
SHA256

8ccd1b1552efac01e2282ee2c4817de8f0142175c72fd8cedd9951053612b1cc
SHA512

d01736a21fa9c929fc6ca429e42e90c787da285d4c375bc797e9ea7c74016cc3a6eb849d4294e60e0b841355410073729385a33d5c5ab6bab062777518c290fe
SSDEEP

96:zFMD6U/zCUG45YpmdPK2IfIn0mktmRJGAcZ5cZScZPKP+x1mSBm8fIiX4SgLSgS6:z2GesmRJIiX4wgwMXf

Score

10^/10

discovery evasion execution exploit

Malware Config

Targets

- Target
  
  Telemetry Disabler Level 1.cmd
- Size
  
  7KB
- MD5
  
  23def6ada8fe3c24a411b5c12e0a2c39
- SHA1
  
  2678083236ed57b864fecb1ae58336bd7c682ddc
- SHA256
  
  8ccd1b1552efac01e2282ee2c4817de8f0142175c72fd8cedd9951053612b1cc
- SHA512
  
  d01736a21fa9c929fc6ca429e42e90c787da285d4c375bc797e9ea7c74016cc3a6eb849d4294e60e0b841355410073729385a33d5c5ab6bab062777518c290fe
- SSDEEP
  
  96:zFMD6U/zCUG45YpmdPK2IfIn0mktmRJGAcZ5cZScZPKP+x1mSBm8fIiX4SgLSgS6:z2GesmRJIiX4wgwMXf
Score

10^/10

discovery evasion execution exploit
- Disables service(s)
  evasion execution
- Possible privilege escalation attempt
  exploit
- Stops running service(s)
  evasion execution
- Modifies file permissions
  discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

File and Directory Permissions Modification

Impair Defenses

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionexploit