e288844362976eef3412a997a4d6453f085f770877d3f0b033d450d4e0eafbde | Triage

Sharing

General

Target

8cf212758d6351310d2b8337a2671020N.exe
Size

860KB
Sample

240719-nnezksyerp
MD5

8cf212758d6351310d2b8337a2671020
SHA1

d4fdd953d4383d35356ace0f2ff497eb999fa6a2
SHA256

e288844362976eef3412a997a4d6453f085f770877d3f0b033d450d4e0eafbde
SHA512

6887369b1595dea76a613e4a9e3733a36846a80e00b0a18b8b1d25a28f6284cac0e59fcafdbffff62ec371da3c0749583dea0aa9a0373982c9ee563afd4920c0
SSDEEP

24576:2wADaJYo8sTH4LaWhOIPqd5x43NXzofQWMSnmwrAtF19w6AYhqp:2ipTMSnU

Score

8^/10

evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  8cf212758d6351310d2b8337a2671020N.exe
- Size
  
  860KB
- MD5
  
  8cf212758d6351310d2b8337a2671020
- SHA1
  
  d4fdd953d4383d35356ace0f2ff497eb999fa6a2
- SHA256
  
  e288844362976eef3412a997a4d6453f085f770877d3f0b033d450d4e0eafbde
- SHA512
  
  6887369b1595dea76a613e4a9e3733a36846a80e00b0a18b8b1d25a28f6284cac0e59fcafdbffff62ec371da3c0749583dea0aa9a0373982c9ee563afd4920c0
- SSDEEP
  
  24576:2wADaJYo8sTH4LaWhOIPqd5x43NXzofQWMSnmwrAtF19w6AYhqp:2ipTMSnU
Score

8^/10

evasion persistence privilege_escalation trojan
- Modifies Windows Firewall
  evasion
- Deletes itself
- Drops startup file
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalationtrojan

behavioral2

evasionpersistenceprivilege_escalation