9e05eebd28de44830ee2e3c2b4ebbbeef016a238dd2639ab668ed4e300dac847 | Triage

Resubmissions

09/09/2024, 11:55

240909-n3zbrsyeqd 5

09/09/2024, 11:52

240909-n11f2syeja 8

Sharing

General

Target

saturnspoofer_cracked.exe
Size

943KB
Sample

240909-n11f2syeja
MD5

72a2994003e8c41a4d7bc303919702b9
SHA1

5a890736c4dc0c24ae2f0b69cc0c326b8c42f293
SHA256

9e05eebd28de44830ee2e3c2b4ebbbeef016a238dd2639ab668ed4e300dac847
SHA512

18d4a4cdfa6238c6633b71b79e8a930e60d8e9d48d150db3395365c66c6843d2f718b43b555645108ec82e3a23b6367f5e82846e2b7114cb40fd1da1886d2345
SSDEEP

12288:mNJrYX+cZOzVOnFm5YX+mZ028x9GJd4hXZ5kppTOFV:UYLkzYn0rmZ0228Jd0Z5aOF

Score

8^/10

discovery evasion execution persistence

Malware Config

Targets

- Target
  
  saturnspoofer_cracked.exe
- Size
  
  943KB
- MD5
  
  72a2994003e8c41a4d7bc303919702b9
- SHA1
  
  5a890736c4dc0c24ae2f0b69cc0c326b8c42f293
- SHA256
  
  9e05eebd28de44830ee2e3c2b4ebbbeef016a238dd2639ab668ed4e300dac847
- SHA512
  
  18d4a4cdfa6238c6633b71b79e8a930e60d8e9d48d150db3395365c66c6843d2f718b43b555645108ec82e3a23b6367f5e82846e2b7114cb40fd1da1886d2345
- SSDEEP
  
  12288:mNJrYX+cZOzVOnFm5YX+mZ028x9GJd4hXZ5kppTOFV:UYLkzYn0rmZ0228Jd0Z5aOF
Score

8^/10

discovery evasion execution persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Stops running service(s)
  evasion execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionpersistence