c73ee8341fbbc0ebe488dfd2f06e4b5c5d19d5d04b167aca40dee04f264d7a17 | Triage

Resubmissions

13/10/2024, 11:25

241013-njbflatfjc 8

13/10/2024, 11:24

241013-nhrq7ayejl 8

Sharing

Copy URL Twitter E-mail

General

Target

PasterX Pasted.exe
Size

328KB
Sample

241013-nhrq7ayejl
MD5

6d04186b401f16d0e1fc2d9d6d90e05c
SHA1

dc89c80ea27b20043ee3f5a9932da7c5fd583f4c
SHA256

c73ee8341fbbc0ebe488dfd2f06e4b5c5d19d5d04b167aca40dee04f264d7a17
SHA512

833bea1f01b4ef9db0bb7ab4b179c70f4c8e9a2eaa390da9d5cac6af44ed64d873380082bdf4b01e4dc514a6affc8b31c9332275e1b79594cc8c7f31b0015d29
SSDEEP

6144:MkkXUJM9EmL1ZGE1yCLgtdv84n4kj9fh:Mrv1ZGHCck4nR5f

Score

8^/10

discovery evasion execution

Malware Config

Targets

- Target
  
  PasterX Pasted.exe
- Size
  
  328KB
- MD5
  
  6d04186b401f16d0e1fc2d9d6d90e05c
- SHA1
  
  dc89c80ea27b20043ee3f5a9932da7c5fd583f4c
- SHA256
  
  c73ee8341fbbc0ebe488dfd2f06e4b5c5d19d5d04b167aca40dee04f264d7a17
- SHA512
  
  833bea1f01b4ef9db0bb7ab4b179c70f4c8e9a2eaa390da9d5cac6af44ed64d873380082bdf4b01e4dc514a6affc8b31c9332275e1b79594cc8c7f31b0015d29
- SSDEEP
  
  6144:MkkXUJM9EmL1ZGE1yCLgtdv84n4kj9fh:Mrv1ZGHCck4nR5f
Score

8^/10

discovery evasion execution
- Stops running service(s)
  evasion execution
- Legitimate hosting services abused for malware hosting/C2
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

behavioral2

discoveryevasionexecution