b8d58233a76881c120c7e025e013baad76a28682f8a3595299417f2d87c3eac7 | Triage

Sharing

General

Target

setup_mortal_kombat_trilogy_1.0_hotfix_(58108).exe
Size

224.9MB
Sample

240801-zl9a7azhjf
MD5

7b23d98123e86d6d7f034f8edaebcf84
SHA1

8b3547a4b8a20ed1684bca2aead4934c80818dc9
SHA256

b8d58233a76881c120c7e025e013baad76a28682f8a3595299417f2d87c3eac7
SHA512

687354fd2ca7a1ace7eefb7910d1c2c91db78ca4d8b07ed93a0980a04d8a826e682bb44f3362c1b583688f1e63dea0bde6fbe2761ad7219485ba5edb4d17cd7b
SSDEEP

6291456:R6fnUnqFY0PpXri/CvbmJUxsA1hcKDKNMyLe+tAjIyBGoPUU:kf+s7oOxdWNMw4jIMfPv

Score

8^/10

discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  setup_mortal_kombat_trilogy_1.0_hotfix_(58108).exe
- Size
  
  224.9MB
- MD5
  
  7b23d98123e86d6d7f034f8edaebcf84
- SHA1
  
  8b3547a4b8a20ed1684bca2aead4934c80818dc9
- SHA256
  
  b8d58233a76881c120c7e025e013baad76a28682f8a3595299417f2d87c3eac7
- SHA512
  
  687354fd2ca7a1ace7eefb7910d1c2c91db78ca4d8b07ed93a0980a04d8a826e682bb44f3362c1b583688f1e63dea0bde6fbe2761ad7219485ba5edb4d17cd7b
- SSDEEP
  
  6291456:R6fnUnqFY0PpXri/CvbmJUxsA1hcKDKNMyLe+tAjIyBGoPUU:kf+s7oOxdWNMw4jIMfPv
Score

8^/10

discovery evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

File and Directory Permissions Modification

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalation

behavioral2