fb581a2cc898f1130a283f27f7969aad7aa67ea39aa05fdf989bb814a7b89f06 | Triage

Sharing

General

Target

minecraft.ZERO.hile.exe
Size

14.4MB
Sample

240613-sdqesatdqb
MD5

cd3b26073f0b68b7a7f1d966dc167713
SHA1

4095946fb5592ef62afcf202556a100fc0694b56
SHA256

fb581a2cc898f1130a283f27f7969aad7aa67ea39aa05fdf989bb814a7b89f06
SHA512

bdba8b6f3c3ad14c0290a48a6238d55b4169ffed783f9b1da6a3bf9810019c1c08962c08a22a1f0c976684ae7c7cd7c01ad2d079b8b7e881bd2874a44a960c6e
SSDEEP

393216:X47JneqUkINXYvnhYVgsdRmPG+aEbzPkgN+XoCfvkG:XGeq7vnhA76GybLkgErkG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  minecraft.ZERO.hile.exe
- Size
  
  14.4MB
- MD5
  
  cd3b26073f0b68b7a7f1d966dc167713
- SHA1
  
  4095946fb5592ef62afcf202556a100fc0694b56
- SHA256
  
  fb581a2cc898f1130a283f27f7969aad7aa67ea39aa05fdf989bb814a7b89f06
- SHA512
  
  bdba8b6f3c3ad14c0290a48a6238d55b4169ffed783f9b1da6a3bf9810019c1c08962c08a22a1f0c976684ae7c7cd7c01ad2d079b8b7e881bd2874a44a960c6e
- SSDEEP
  
  393216:X47JneqUkINXYvnhYVgsdRmPG+aEbzPkgN+XoCfvkG:XGeq7vnhA76GybLkgErkG
Score

7^/10

discovery
- Loads dropped DLL
- Modifies file permissions
  discovery
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Process Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2