e64696fd2027f8611c05f177df114846e24f194eb7b40bce87b3c7b94ea26135 | Triage

Sharing

General

Target

PC ZONE FREE UTILITY V1.exe
Size

276KB
Sample

240920-263p9atcld
MD5

038b650ea8fa86341904193436dae791
SHA1

204a4cd4258c9db5e9ab4ae038e25d9c288791ed
SHA256

e64696fd2027f8611c05f177df114846e24f194eb7b40bce87b3c7b94ea26135
SHA512

14d465d0962ab554f876e8dde65f58a74ec57b44c847821e4ee42263cd8bd423a8394ebbafba9b5465ef6059382eac41e2c5609b0d7542b4c805fae0196f8256
SSDEEP

6144:htzsb5Uh28+V1WW69B9VjMdxPedN9ug0z9TB9S0JQaGVRA+vIX7lcjqqBynHWQMB:htzE5elwLz9TrDJA/0hyiWdl/

Score

10^/10

discovery evasion execution

Malware Config

Targets

- Target
  
  PC ZONE FREE UTILITY V1.exe
- Size
  
  276KB
- MD5
  
  038b650ea8fa86341904193436dae791
- SHA1
  
  204a4cd4258c9db5e9ab4ae038e25d9c288791ed
- SHA256
  
  e64696fd2027f8611c05f177df114846e24f194eb7b40bce87b3c7b94ea26135
- SHA512
  
  14d465d0962ab554f876e8dde65f58a74ec57b44c847821e4ee42263cd8bd423a8394ebbafba9b5465ef6059382eac41e2c5609b0d7542b4c805fae0196f8256
- SSDEEP
  
  6144:htzsb5Uh28+V1WW69B9VjMdxPedN9ug0z9TB9S0JQaGVRA+vIX7lcjqqBynHWQMB:htzE5elwLz9TrDJA/0hyiWdl/
Score

10^/10

discovery evasion execution
- Disables service(s)
  evasion execution
- Stops running service(s)
  evasion execution
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

behavioral2

discoveryevasionexecution