3ba2baa0f6473b8231c03600e866651c4dff9db5ef94219fc2f400c807572c82 | Triage

Sharing

General

Target

2f357264dba5baf086f5e2993a41b2a5.exe
Size

151KB
Sample

241002-bxph6azhnn
MD5

2f357264dba5baf086f5e2993a41b2a5
SHA1

7829842d7fa7e2cf66062afd1e244638dac103fd
SHA256

3ba2baa0f6473b8231c03600e866651c4dff9db5ef94219fc2f400c807572c82
SHA512

9d324dd89e41062d1abb797e31413dbb00d52afe2552d28bcc91623e00681932d4a34e03a992ab519c208fc083e07c996edc376100f10e1df0373ca99461c900
SSDEEP

3072:q/4u3Yq6fuqYb+NqclIa6oyqIhdwGatrECWdKZ/fN2+EHPozA:xu3OeMN+FlmdECWGXN+9

Score

8^/10

discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  2f357264dba5baf086f5e2993a41b2a5.exe
- Size
  
  151KB
- MD5
  
  2f357264dba5baf086f5e2993a41b2a5
- SHA1
  
  7829842d7fa7e2cf66062afd1e244638dac103fd
- SHA256
  
  3ba2baa0f6473b8231c03600e866651c4dff9db5ef94219fc2f400c807572c82
- SHA512
  
  9d324dd89e41062d1abb797e31413dbb00d52afe2552d28bcc91623e00681932d4a34e03a992ab519c208fc083e07c996edc376100f10e1df0373ca99461c900
- SSDEEP
  
  3072:q/4u3Yq6fuqYb+NqclIa6oyqIhdwGatrECWdKZ/fN2+EHPozA:xu3OeMN+FlmdECWGXN+9
Score

8^/10

discovery evasion persistence privilege_escalation
- Drops file in Drivers directory
- Modifies Windows Firewall
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalation