8f3af8a9f7d3cf282d62a532bc286d14d4f30ca47bfc81a61e5c17c731260398 | Triage

Sharing

General

Target

8f3af8a9f7d3cf282d62a532bc286d14d4f30ca47bfc81a61e5c17c731260398N
Size

220KB
Sample

240920-rnbhya1bla
MD5

0568ea72f70136478f87f1eb915b30e0
SHA1

55111f97091821d9f1b2276a2abe20898c9d3c07
SHA256

8f3af8a9f7d3cf282d62a532bc286d14d4f30ca47bfc81a61e5c17c731260398
SHA512

957bf3e8fe3d513c9ab2eb360c7d6c067a62e56dbdc8679fb063501984917a3435776c61d0d8372bbcf4e3c5771103287fe055f4a5377c90fcd32e9e1a5964f0
SSDEEP

1536:GeNCn/HB8HMNYDBbZDeNCn/HB8irRlGCmDYbPZ2IUr:GeGOMNYPDeGRC/0zFUr

Score

10^/10

discovery evasion

Malware Config

Targets

- Target
  
  8f3af8a9f7d3cf282d62a532bc286d14d4f30ca47bfc81a61e5c17c731260398N
- Size
  
  220KB
- MD5
  
  0568ea72f70136478f87f1eb915b30e0
- SHA1
  
  55111f97091821d9f1b2276a2abe20898c9d3c07
- SHA256
  
  8f3af8a9f7d3cf282d62a532bc286d14d4f30ca47bfc81a61e5c17c731260398
- SHA512
  
  957bf3e8fe3d513c9ab2eb360c7d6c067a62e56dbdc8679fb063501984917a3435776c61d0d8372bbcf4e3c5771103287fe055f4a5377c90fcd32e9e1a5964f0
- SSDEEP
  
  1536:GeNCn/HB8HMNYDBbZDeNCn/HB8irRlGCmDYbPZ2IUr:GeGOMNYPDeGRC/0zFUr
Score

10^/10

discovery evasion
- Modifies firewall policy service
  evasion
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasion