4a05d7c2b476636c8a78cc33b9fd62a52fb764f99789c56da6cdf1d313825ae7 | Triage

Sharing

General

Target

4069c89db392d1798e209bad13f15450N.exe
Size

136KB
Sample

240818-plk89awfkk
MD5

4069c89db392d1798e209bad13f15450
SHA1

c71d8077560524eb1b755918edee42a6d182a3a3
SHA256

4a05d7c2b476636c8a78cc33b9fd62a52fb764f99789c56da6cdf1d313825ae7
SHA512

acb1f68c2472a884a185ef4f28ee8ad05a3418a20a8682567e71b19283e8dc40c3d25fa40e37bf2cba3c8d50bf6cc6906f6d05e9145111a1da40ee80be3c1b36
SSDEEP

3072:3mZWXyaiedMbrN6pnoXyBsr5Zr10Y7Bvaaw:3SNaPM4lop5Zx0YJaaw

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  4069c89db392d1798e209bad13f15450N.exe
- Size
  
  136KB
- MD5
  
  4069c89db392d1798e209bad13f15450
- SHA1
  
  c71d8077560524eb1b755918edee42a6d182a3a3
- SHA256
  
  4a05d7c2b476636c8a78cc33b9fd62a52fb764f99789c56da6cdf1d313825ae7
- SHA512
  
  acb1f68c2472a884a185ef4f28ee8ad05a3418a20a8682567e71b19283e8dc40c3d25fa40e37bf2cba3c8d50bf6cc6906f6d05e9145111a1da40ee80be3c1b36
- SSDEEP
  
  3072:3mZWXyaiedMbrN6pnoXyBsr5Zr10Y7Bvaaw:3SNaPM4lop5Zx0YJaaw
Score

10^/10

discovery evasion
- Modifies firewall policy service
  evasion
- Drops file in Drivers directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasion