3bdc58e1586f13c2235facad41e048e9475fb7a0f3cf28f106fbc496ddba4c3e | Triage

Resubmissions

26/07/2024, 19:00

240726-xnn2xsyarn 8

Sharing

General

Target

thats not my neighbor.exe
Size

8KB
Sample

240726-xnn2xsyarn
MD5

c6bffae52e9552a22a1aee2993ee361c
SHA1

9799422474b327cc48e7d8ca1029d9f4ef1f2900
SHA256

3bdc58e1586f13c2235facad41e048e9475fb7a0f3cf28f106fbc496ddba4c3e
SHA512

e9f4a95e9469d4aa45b94879c57d5f296c3d2194af6007865943fcb9ebd719f73815e65557e22f83c605d973924b12a340f6d29bc23e3baa7496a34d4cbcc2ed
SSDEEP

192:QLTeeNdaLixSepSnm/VunlYJLLLTuEFNZEk9qaP:QLTtdaLiyuhPLTuEFzETa

Score

8^/10

discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  thats not my neighbor.exe
- Size
  
  8KB
- MD5
  
  c6bffae52e9552a22a1aee2993ee361c
- SHA1
  
  9799422474b327cc48e7d8ca1029d9f4ef1f2900
- SHA256
  
  3bdc58e1586f13c2235facad41e048e9475fb7a0f3cf28f106fbc496ddba4c3e
- SHA512
  
  e9f4a95e9469d4aa45b94879c57d5f296c3d2194af6007865943fcb9ebd719f73815e65557e22f83c605d973924b12a340f6d29bc23e3baa7496a34d4cbcc2ed
- SSDEEP
  
  192:QLTeeNdaLixSepSnm/VunlYJLLLTuEFNZEk9qaP:QLTtdaLiyuhPLTuEFzETa
Score

8^/10

discovery evasion persistence privilege_escalation
- Disables Task Manager via registry modification
  evasion
- Modifies Windows Firewall
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalation