eb642a90bfe0b537c3d87a2449a6b2817401ef9c273f95d7617f886a3e003f90 | Triage

Resubmissions

16-03-2021 18:01

210316-trddssyj5s 10

16-03-2021 17:35

210316-s74c3lhrtn 8

Sharing

General

Target

4736165492850688.zip
Size

7.8MB
Sample

210316-s74c3lhrtn
MD5

ba8d8522e8075c30e7439b85fb570753
SHA1

08340b5f6c9177220fde8762e9170ba344e488c0
SHA256

eb642a90bfe0b537c3d87a2449a6b2817401ef9c273f95d7617f886a3e003f90
SHA512

207cfbc394544cf3eb8e8c50523f1fc2fe7946f034c28b53dbef19fdfba3efa8eb45bc6b7cdc80f0284fa3cdb265de8c80ff67db51e8f8f28fb44a9998def010

Score

8^/10

Malware Config

Targets

- Target
  
  aa5ba0f6ce6bb84632d0dda729c787961b751c237372aa47dc49dc8a8a9a749d
- Size
  
  117.6MB
- MD5
  
  015fd4bc87666d454f1517b2970dc097
- SHA1
  
  88685aaaba4297deef30ac4fe9bd065baa7c0c0d
- SHA256
  
  aa5ba0f6ce6bb84632d0dda729c787961b751c237372aa47dc49dc8a8a9a749d
- SHA512
  
  ed3378510720b92fa77098c4d48763ea04e52c63bbbf074b711e16ef781281314dad6a7e0d3069bf0cd7598c1ea426b6effabd691ae0a945e79144afdd153637
Score

8^/10
- Blocklisted process makes network request
- Executes dropped EXE
- Drops startup file
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2