General

  • Target

    MicrosoftStore.exe

  • Size

    20.7MB

  • Sample

    240524-x8p5qagd9t

  • MD5

    3e07483e873ef6c07c91ec1f3083af7e

  • SHA1

    aa6a62f8ea6dcae0baeabf564b76450e46db0485

  • SHA256

    a63d3bcd14fa37f059ab97d4cab150bf5366d64a76b344e73c323dee963c43f2

  • SHA512

    382cff29c0c440f066d73c826407e82c12bb62a0db7827f6e41bc59605d51bab116ca09009b45d625892f874dba8ecb3ef4ed8ba080f1308adf0ce896da41e09

  • SSDEEP

    393216:/9gmQsAeR026hSiwkT+BQeLxdrSgHko5hvNHR7lYqeVYMQLSyMAtY:NQ0RPn+++OxdBhlY1NMMOY

Malware Config

Targets

    • Target

      MicrosoftStore.exe

    • Size

      20.7MB

    • MD5

      3e07483e873ef6c07c91ec1f3083af7e

    • SHA1

      aa6a62f8ea6dcae0baeabf564b76450e46db0485

    • SHA256

      a63d3bcd14fa37f059ab97d4cab150bf5366d64a76b344e73c323dee963c43f2

    • SHA512

      382cff29c0c440f066d73c826407e82c12bb62a0db7827f6e41bc59605d51bab116ca09009b45d625892f874dba8ecb3ef4ed8ba080f1308adf0ce896da41e09

    • SSDEEP

      393216:/9gmQsAeR026hSiwkT+BQeLxdrSgHko5hvNHR7lYqeVYMQLSyMAtY:NQ0RPn+++OxdBhlY1NMMOY

    • Possible privilege escalation attempt

    • Loads dropped DLL

    • Modifies file permissions

MITRE ATT&CK Matrix ATT&CK v13

Execution

Command and Scripting Interpreter

1
T1059

PowerShell

1
T1059.001

Defense Evasion

File and Directory Permissions Modification

1
T1222

Discovery

System Information Discovery

1
T1082

Tasks