bc4e2e5e6b47482339f33f041636fc1b03f7ae31c7aaf575ebc3a090fdd51d32 | Triage

Sharing

General

Target

Virus_Destructive_open_source.zip
Size

283KB
Sample

241123-pp46ja1lhq
MD5

0592f326bdc30a76214b2a145f6ef04e
SHA1

3d7f82338a8ec90d3effb7d3f123c4e05a3b6178
SHA256

bc4e2e5e6b47482339f33f041636fc1b03f7ae31c7aaf575ebc3a090fdd51d32
SHA512

161646245dec8cb4f9a6195968eba8fb721c613b4ed6736ecfa6198e67fa894ac49247d026d814e19ecd5b9b03ef86a8d63b1b510b81b3329269434c1104b122
SSDEEP

6144:TqgYkgz2w8EOfqgYkgz2w8NK4O1c21TKQo:5Pg6MOVPg6lR2Mz

Score

8^/10

discovery evasion exploit

Malware Config

Targets

- Target
  
  Virus_Destructive/Virus_Destructive/bin/Debug/Virus_Destructive.exe
- Size
  
  249KB
- MD5
  
  1241c7fa483e828693d121d6933ccc19
- SHA1
  
  d766b6a14c9476aad4fb994fa06a24265f1eb24b
- SHA256
  
  4a132f5fca3763d8328c66ae447ac331e5bede35a63b6cac8bd845a3504d5bbb
- SHA512
  
  febb9519e5c63ea50d673c26a98fa675378c1d9205bd9bc878aeb3e0130c2cd877ad922df4a2c7dcea7a9815b6fae83becb896e38f59f3d7a7edf0e161cd28ff
- SSDEEP
  
  6144:I50tR/5gjbnI3OkLFxD5tKdHDunqIxynuzJ50tR15gjbnI3OkLFxD5tKdHDunkIs://5gjbnI3OkLFxD5tKZDunjxynuzu152
Score

8^/10

discovery evasion exploit
- Disables Task Manager via registry modification
  evasion
- Possible privilege escalation attempt
  exploit
- Modifies file permissions
  discovery
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  
  Virus_Destructive/Virus_Destructive/obj/Debug/Virus_Destructive.exe
- Size
  
  249KB
- MD5
  
  1241c7fa483e828693d121d6933ccc19
- SHA1
  
  d766b6a14c9476aad4fb994fa06a24265f1eb24b
- SHA256
  
  4a132f5fca3763d8328c66ae447ac331e5bede35a63b6cac8bd845a3504d5bbb
- SHA512
  
  febb9519e5c63ea50d673c26a98fa675378c1d9205bd9bc878aeb3e0130c2cd877ad922df4a2c7dcea7a9815b6fae83becb896e38f59f3d7a7edf0e161cd28ff
- SSDEEP
  
  6144:I50tR/5gjbnI3OkLFxD5tKdHDunqIxynuzJ50tR15gjbnI3OkLFxD5tKdHDunkIs://5gjbnI3OkLFxD5tKZDunjxynuzu152
Score

1^/10
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionexploit

behavioral2

behavioral3

behavioral4