Overview

overview

10

Static

static

3

setup.exe

windows10-2004-x64

10

Resubmissions

12-07-2024 05:46

240712-ggmyaatarg 10

12-07-2024 05:39

240712-gcfneazhrq 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    setup.zip

  • Size

    3.9MB

  • Sample

    240712-ggmyaatarg

  • MD5

    8acb1e36eb89a062a04359b1af6d04e2

  • SHA1

    b25e3f2e1779fed420fde2bc210a7b265dcf2959

  • SHA256

    c12a3e6b8f295e383286159a46c62f3401aee51aae8e5b1c6472d0bbdb49d3f6

  • SHA512

    d63683ac355edc1175b43def7fd363f3909582879e35bf9981ee040e8afb41d0dbae6e7234eb4050f9c1a5ea9db760b4f1d73fb106851dbb7a0aeee0b0d2bfb6

  • SSDEEP

    98304:CO+xFf/HhzrXs9w5TCMf2cmDpM8+Q9NboUhSSeuLD:n+/HhzrRN8+QEUhSSeuLD

Score
10/10
privateloaderevasionloader

Malware Config

Targets

    • Target

      setup.exe

    • Size

      792.0MB

    • MD5

      d99235956d2438017dce77cbf6cb1176

    • SHA1

      4121d8636b556b9da48081b2d818f3dcde3ac9a4

    • SHA256

      74134cd0030b7681d9f753f8ecf68bf14937ba0261522bf05e5bef564cd8b8b0

    • SHA512

      f090c7d82daf9f3ae9582e1d40f22272cb7e8911eae20c312704c7b814005816c8a78960b0ec21d376443db3c49c9d012052aa1f5692167b514fcf3211841351

    • SSDEEP

      98304:rOuBF3zj5prjsd8VNCofaoUhXo8uG9pmSgQ7gCbHRd3bcEo:qunj5prvX8uGxgQZLcEo

    Score
    10/10
    privateloaderevasionloader

    • Modifies firewall policy service

      evasion

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

      loaderprivateloader

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Create or Modify System Process

1
T1543

Windows Service

1
T1543.003

Privilege Escalation

Create or Modify System Process

1
T1543

Windows Service

1
T1543.003

Defense Evasion

Modify Registry

1
T1112

Impair Defenses

1
T1562

Disable or Modify System Firewall

1
T1562.004

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks