780d59c53dc2ebe8ec84af5536870515e057a98c66e4b44f09d8bf7369e9df49 | Triage

Resubmissions

03/07/2024, 19:35

240703-yax84svbnq 8

03/07/2024, 19:34

240703-yacx6svblq 8

03/07/2024, 19:31

240703-x8r93swdna 8

Sharing

Copy URL Twitter E-mail

General

Target

Loader.vmp.exe
Size

6.2MB
Sample

240703-x8r93swdna
MD5

02012895dc6453c774d21a4043cae96c
SHA1

f1c1d01805c6503cd3f21879566c1156cf9a8b8a
SHA256

780d59c53dc2ebe8ec84af5536870515e057a98c66e4b44f09d8bf7369e9df49
SHA512

7a656b71a17f57d77770a3fc97dac5b02ae5dd4c78211a0a72b98c087ee2be7512f0b943dea544175916bf81e76f6584240615b314db48993d1d278c57fb1e47
SSDEEP

196608:DQZrLRsJzG6sMhX0nKyZXsC6C0eK9LXxEf:DcDnKySpjXxS

Score

8^/10

evasion execution

Malware Config

Targets

- Target
  
  Loader.vmp.exe
- Size
  
  6.2MB
- MD5
  
  02012895dc6453c774d21a4043cae96c
- SHA1
  
  f1c1d01805c6503cd3f21879566c1156cf9a8b8a
- SHA256
  
  780d59c53dc2ebe8ec84af5536870515e057a98c66e4b44f09d8bf7369e9df49
- SHA512
  
  7a656b71a17f57d77770a3fc97dac5b02ae5dd4c78211a0a72b98c087ee2be7512f0b943dea544175916bf81e76f6584240615b314db48993d1d278c57fb1e47
- SSDEEP
  
  196608:DQZrLRsJzG6sMhX0nKyZXsC6C0eK9LXxEf:DcDnKySpjXxS
Score

8^/10

evasion execution
- Stops running service(s)
  evasion execution
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionexecution