7b0488c2766c7fa58ff8e3d2ef8a3b0d2546eec32775304b779de94fbc996014 | Triage

Sharing

General

Target

8f1d680385a2214ef98d894e1c40a9f0N.exe
Size

139KB
Sample

240722-k7mlzszama
MD5

8f1d680385a2214ef98d894e1c40a9f0
SHA1

2e44971493cf988a187a609f12dffa3494d34fcb
SHA256

7b0488c2766c7fa58ff8e3d2ef8a3b0d2546eec32775304b779de94fbc996014
SHA512

f8bdaad26b50b80253b74480e043d0a709d9a0b6d7fec485f8e6362145d4dd99df7b3f5bf9db7443e08066d6e834129d03d0da5383fc3b3d2c079b0dea723ec0
SSDEEP

1536:rC2/fYuPfbESFYXRWhpKRycRd57JkIqFHhzm4hWru/BzihhMN45MF5FvHP132xPi:r7YubEwYXRWhpAJUHhzm4hUukS6Kmeco

Score

8^/10

evasion execution

Malware Config

Targets

- Target
  
  8f1d680385a2214ef98d894e1c40a9f0N.exe
- Size
  
  139KB
- MD5
  
  8f1d680385a2214ef98d894e1c40a9f0
- SHA1
  
  2e44971493cf988a187a609f12dffa3494d34fcb
- SHA256
  
  7b0488c2766c7fa58ff8e3d2ef8a3b0d2546eec32775304b779de94fbc996014
- SHA512
  
  f8bdaad26b50b80253b74480e043d0a709d9a0b6d7fec485f8e6362145d4dd99df7b3f5bf9db7443e08066d6e834129d03d0da5383fc3b3d2c079b0dea723ec0
- SSDEEP
  
  1536:rC2/fYuPfbESFYXRWhpKRycRd57JkIqFHhzm4hWru/BzihhMN45MF5FvHP132xPi:r7YubEwYXRWhpAJUHhzm4hUukS6Kmeco
Score

8^/10

evasion execution
- Stops running service(s)
  evasion execution
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionexecution

behavioral2

evasionexecution