3416c897b65b6ab2cd89b93dbd0acd53c0aef2590182fdbcce61b6024bf2a232 | Triage

Sharing

General

Target

9fa06408f91e060c38950440ff7d7910N.exe
Size

701KB
Sample

240824-3bh8ssxbnj
MD5

9fa06408f91e060c38950440ff7d7910
SHA1

fddc5c83446ed362df9b40e411f416c25e276681
SHA256

3416c897b65b6ab2cd89b93dbd0acd53c0aef2590182fdbcce61b6024bf2a232
SHA512

0a3910c351b7827d92166e0262fde679c0707febb111a9600a603d7687c9165d0dee68543162b57e7c7d495d0a5b6f47a2e0f61119f08ad57589286d6b5e523a
SSDEEP

768:rZmchlXKGREW6VA6joSRhFH+C9Pe2auEqainmngYWxuv8Gwmwoe9R4ZstojtfcWv:schl6M+lpDCUoHid0bIrlyR

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  
  9fa06408f91e060c38950440ff7d7910N.exe
- Size
  
  701KB
- MD5
  
  9fa06408f91e060c38950440ff7d7910
- SHA1
  
  fddc5c83446ed362df9b40e411f416c25e276681
- SHA256
  
  3416c897b65b6ab2cd89b93dbd0acd53c0aef2590182fdbcce61b6024bf2a232
- SHA512
  
  0a3910c351b7827d92166e0262fde679c0707febb111a9600a603d7687c9165d0dee68543162b57e7c7d495d0a5b6f47a2e0f61119f08ad57589286d6b5e523a
- SSDEEP
  
  768:rZmchlXKGREW6VA6joSRhFH+C9Pe2auEqainmngYWxuv8Gwmwoe9R4ZstojtfcWv:schl6M+lpDCUoHid0bIrlyR
Score

8^/10

discovery execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
  execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecution