80b1cbfc43e41cd245787212d6b4da84631594152ac83dcf1796bf5ae0386178 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

InstallDefenderUIPro.exe
Size

20.4MB
Sample

240608-b65lqsgc46
MD5

96d22442433cc2ea86d5c0e811199161
SHA1

0bd186aee9a0c43ba555319e6a2b7f1c01e83f39
SHA256

80b1cbfc43e41cd245787212d6b4da84631594152ac83dcf1796bf5ae0386178
SHA512

ed5704906b662958b164688ac8d28dde0c1028814b21da7b1f8fd59d1e2ba948156b2b61fb327389d2d02a503d711c88d601e0c90df500721df087e1dea1f490
SSDEEP

393216:gMhVOKf1xjdG/abh9ObZ/B50Ex80G2RKo01kHjihYaZRuMhdguO4N2PqswK50IXD:gMhV9fjjdG/4mZcPq4o0ymaaPuMMPqng

Score

8^/10

discovery evasion execution persistence

Malware Config

Targets

- Target
  
  InstallDefenderUIPro.exe
- Size
  
  20.4MB
- MD5
  
  96d22442433cc2ea86d5c0e811199161
- SHA1
  
  0bd186aee9a0c43ba555319e6a2b7f1c01e83f39
- SHA256
  
  80b1cbfc43e41cd245787212d6b4da84631594152ac83dcf1796bf5ae0386178
- SHA512
  
  ed5704906b662958b164688ac8d28dde0c1028814b21da7b1f8fd59d1e2ba948156b2b61fb327389d2d02a503d711c88d601e0c90df500721df087e1dea1f490
- SSDEEP
  
  393216:gMhVOKf1xjdG/abh9ObZ/B50Ex80G2RKo01kHjihYaZRuMhdguO4N2PqswK50IXD:gMhV9fjjdG/4mZcPq4o0ymaaPuMMPqng
Score

8^/10

discovery evasion execution persistence
- Drops file in Drivers directory
- Stops running service(s)
  evasion execution
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionpersistence