72f466e2b9157fd8d615cb2132adb823814b6ed8c86ac8825881e9b491e76f6e | Triage

Sharing

General

Target

PhantomSolutions.exe
Size

4.2MB
Sample

240522-slem9afe69
MD5

8d2401533111cc9f68adc7cbd8cb3a64
SHA1

e8ba09c59470a5c99deeeae28c88b67df55f8b6c
SHA256

72f466e2b9157fd8d615cb2132adb823814b6ed8c86ac8825881e9b491e76f6e
SHA512

2eea6b499d281cb5e105bf4b13319627e2999e4d218bfad01f595e51411b3d74f334b150013798c928159712d6ec38713959683512e208838bc787ac92e88de6
SSDEEP

98304:Kd7m+ij9HD0+jCihNRkl/W6aG/wcKnfu8NUT6K:p+y4ihkl/Wo/afHP

Score

8^/10

evasion execution

Malware Config

Targets

- Target
  
  PhantomSolutions.exe
- Size
  
  4.2MB
- MD5
  
  8d2401533111cc9f68adc7cbd8cb3a64
- SHA1
  
  e8ba09c59470a5c99deeeae28c88b67df55f8b6c
- SHA256
  
  72f466e2b9157fd8d615cb2132adb823814b6ed8c86ac8825881e9b491e76f6e
- SHA512
  
  2eea6b499d281cb5e105bf4b13319627e2999e4d218bfad01f595e51411b3d74f334b150013798c928159712d6ec38713959683512e208838bc787ac92e88de6
- SSDEEP
  
  98304:Kd7m+ij9HD0+jCihNRkl/W6aG/wcKnfu8NUT6K:p+y4ihkl/Wo/afHP
Score

8^/10

evasion execution
- Stops running service(s)
  evasion execution
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionexecution