027754d90d66396ce26d04fe6ea7f6df93b584a9c09f4a61acb4979cc4bc1b00 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

loader.exe
Size

497KB
Sample

240802-dk2n3axbqh
MD5

145b7403a32b884f5fe00d4c485aa422
SHA1

f834a52db4faa218b2c125d99ce1b35a5949c469
SHA256

027754d90d66396ce26d04fe6ea7f6df93b584a9c09f4a61acb4979cc4bc1b00
SHA512

cf11118c28528c897bd7010746e17ca4c2551615c9ba914c14ccdd61e2070815cdba9cd1b5c303ab5f040fa1633aac0ac02777c5b26a1f15651939a904a5f10d
SSDEEP

12288:lhriOeNN4FmxCqon1UxCj2AqeMQm5A4e:3rkOFG3on1uGKF5A4e

Score

8^/10

evasion execution

Malware Config

Targets

- Target
  
  loader.exe
- Size
  
  497KB
- MD5
  
  145b7403a32b884f5fe00d4c485aa422
- SHA1
  
  f834a52db4faa218b2c125d99ce1b35a5949c469
- SHA256
  
  027754d90d66396ce26d04fe6ea7f6df93b584a9c09f4a61acb4979cc4bc1b00
- SHA512
  
  cf11118c28528c897bd7010746e17ca4c2551615c9ba914c14ccdd61e2070815cdba9cd1b5c303ab5f040fa1633aac0ac02777c5b26a1f15651939a904a5f10d
- SSDEEP
  
  12288:lhriOeNN4FmxCqon1UxCj2AqeMQm5A4e:3rkOFG3on1uGKF5A4e
Score

8^/10

evasion execution
- Downloads MZ/PE file
- Stops running service(s)
  evasion execution
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionexecution

behavioral2

evasionexecution