cfe5dcf1560ab027ba58c28bc351875a19d9be4b48c12a7ee8ffd3900142b7a4 | Triage

Sharing

General

Target

cfe5dcf1560ab027ba58c28bc351875a19d9be4b48c12a7ee8ffd3900142b7a4
Size

3.7MB
Sample

240529-bs6xmsde92
MD5

990f0eb67605df4a888569855b9ef4bb
SHA1

2d19c0830200ff83358a86083314af0ff8459190
SHA256

cfe5dcf1560ab027ba58c28bc351875a19d9be4b48c12a7ee8ffd3900142b7a4
SHA512

18cb7d7f4b03e61332da86fffb66dc604fc6d46b1a488968e9914f29f17bc96e8129e485ce0c13c084e729c1469ea3225032288f5c7c99ced72071cd3650a8a4
SSDEEP

98304:Ws7WcPBPn9Y7bIkbp72jLT+tsPnl42Fo:YPIkdeHnllFo

Score

8^/10

evasion execution

Malware Config

Targets

- Target
  
  cfe5dcf1560ab027ba58c28bc351875a19d9be4b48c12a7ee8ffd3900142b7a4
- Size
  
  3.7MB
- MD5
  
  990f0eb67605df4a888569855b9ef4bb
- SHA1
  
  2d19c0830200ff83358a86083314af0ff8459190
- SHA256
  
  cfe5dcf1560ab027ba58c28bc351875a19d9be4b48c12a7ee8ffd3900142b7a4
- SHA512
  
  18cb7d7f4b03e61332da86fffb66dc604fc6d46b1a488968e9914f29f17bc96e8129e485ce0c13c084e729c1469ea3225032288f5c7c99ced72071cd3650a8a4
- SSDEEP
  
  98304:Ws7WcPBPn9Y7bIkbp72jLT+tsPnl42Fo:YPIkdeHnllFo
Score

8^/10

evasion execution
- Stops running service(s)
  evasion execution
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionexecution

behavioral2

evasionexecution