General

  • Target

    MDE_File_Sample_6bdc28b673d25481a7a5828aca6efd87d2c90b14.zip

  • Size

    4.4MB

  • Sample

    240930-mv6v7s1brj

  • MD5

    a52c32527253d8a18c67d5e1e814c230

  • SHA1

    1b0e818f1f759a93b774f770ed14a4fd151f2be7

  • SHA256

    9e565f66cf462a6438bfb615dfe4db4189f5705339c41d6e74e1bcbaa829f636

  • SHA512

    6a421595ce4b1cbb7c0bb9349d0c9c91762404abb68d2bfb0d8b6edd998e92fd7ee4fe44910dd9d85ec26ecbaa464503820f767969c548a931d0203351a21c02

  • SSDEEP

    98304:sA5y4/NOfuhlaMvSJtZ6B52fSg1Z01yNnX3oUUl9FF4pg:/ySNG5CcZ6B5eSgDSyNIUUhF4pg

Malware Config

Targets

    • Target

      6bdc28b673d25481a7a5828aca6efd87d2c90b14

    • Size

      6.4MB

    • MD5

      bfacf78644ca41fd6d4b23976e7574a1

    • SHA1

      6bdc28b673d25481a7a5828aca6efd87d2c90b14

    • SHA256

      94a1a26f61b015c2ced2fd50bdba4070b6c9aec7d2938fbf7eb9e99960d3b7a9

    • SHA512

      af53e3314aeeee95a082d7326abb0743f76f19b57f5d604a613858c0014d3454a6b842c844dc6675f61e55f72daff67e2b17127f745ea74a865d8abc97265a2d

    • SSDEEP

      98304:G33yKMaL/eXV1i/kDxkmcL/eXV1i/kaRWYL/eXV1i/kmeM1qj4iwiANvSo2/CAyq:QyKnZrrLGA3PhsKPkG0tWu

    • Possible privilege escalation attempt

    • Loads dropped DLL

    • Modifies file permissions

    • File and Directory Permissions Modification: Windows File and Directory Permissions Modification

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks