8dd4140b95827de5ff24c78bf63a3f5d8808ba01c4eff695d6c9bd29c54373b9 | Triage

Sharing

General

Target

spoofer.exe
Size

20.2MB
Sample

240906-1zzjkszhpe
MD5

f872f0e30e3186dd1b79dbf9180b6bb5
SHA1

f07f378133e4f00d57eee9510f32f71112f4183b
SHA256

8dd4140b95827de5ff24c78bf63a3f5d8808ba01c4eff695d6c9bd29c54373b9
SHA512

807ffaa884c8c6ab889985f72b02508dd71dd09c51537ea7ab125818dfbc8d8bf22d738d7bfca619e6698fa9abec1b138e19c33a138c017699aee2c33b15eb15
SSDEEP

393216:k1DdwGV2SW80jJpT61+TtIigeJIZH1DdAEThSiau50ENsIfzWQN3sRwO1c:k1JfjW80jJpO1QtIbS0H1JAEMw50fILy

Score

8^/10

evasion execution pyinstaller

Malware Config

Targets

- Target
  
  spoofer.exe
- Size
  
  20.2MB
- MD5
  
  f872f0e30e3186dd1b79dbf9180b6bb5
- SHA1
  
  f07f378133e4f00d57eee9510f32f71112f4183b
- SHA256
  
  8dd4140b95827de5ff24c78bf63a3f5d8808ba01c4eff695d6c9bd29c54373b9
- SHA512
  
  807ffaa884c8c6ab889985f72b02508dd71dd09c51537ea7ab125818dfbc8d8bf22d738d7bfca619e6698fa9abec1b138e19c33a138c017699aee2c33b15eb15
- SSDEEP
  
  393216:k1DdwGV2SW80jJpT61+TtIigeJIZH1DdAEThSiau50ENsIfzWQN3sRwO1c:k1JfjW80jJpO1QtIbS0H1JAEMw50fILy
Score

8^/10

evasion execution
- Stops running service(s)
  evasion execution
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

behavioral2

evasionexecution