66270f88ef9e9b3804903f3ac0e152f593ff72812f33e89b68848b19281c0c27 | Triage

Sharing

General

Target

MacroRecorderSetup.exe
Size

43.8MB
Sample

241014-y96pjavekb
MD5

13fffd4457ced32c07f1e846eaa1e635
SHA1

91260b54dfd59f9a99142f2aae79724178a798cb
SHA256

66270f88ef9e9b3804903f3ac0e152f593ff72812f33e89b68848b19281c0c27
SHA512

7c4f56ebdea19d6b905682b6ac9085cd244106f01d5ac0d45bb13b1df09b923de4396a79ff5628d9a7abf67fe436f211838bb0a6d8f37f0f87d4532d29eddf9d
SSDEEP

786432:C25w45VXPJQwSuoy5xCDza9f7iPoOzIfhGbuGHkEol2ooMipXv8/GxiEmTnxo:CkwnwFd4zLPzIfhG1Ioovcf+zECW

Score

8^/10

discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  
  MacroRecorderSetup.exe
- Size
  
  43.8MB
- MD5
  
  13fffd4457ced32c07f1e846eaa1e635
- SHA1
  
  91260b54dfd59f9a99142f2aae79724178a798cb
- SHA256
  
  66270f88ef9e9b3804903f3ac0e152f593ff72812f33e89b68848b19281c0c27
- SHA512
  
  7c4f56ebdea19d6b905682b6ac9085cd244106f01d5ac0d45bb13b1df09b923de4396a79ff5628d9a7abf67fe436f211838bb0a6d8f37f0f87d4532d29eddf9d
- SSDEEP
  
  786432:C25w45VXPJQwSuoy5xCDza9f7iPoOzIfhGbuGHkEol2ooMipXv8/GxiEmTnxo:CkwnwFd4zLPzIfhG1Ioovcf+zECW
Score

8^/10

discovery evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Checks for any installed AV software in registry
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Query Registry

Software Discovery

Security Software Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalation