50682b932c660c67a6fe47cd4ad0b8012021cbfa00ae572b0cdae750ae2a1b1c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50682b932c660c67a6fe47cd4ad0b8012021cbfa00ae572b0cdae750ae2a1b1c
Size

361KB
Sample

221001-x9pkkscdh7
MD5

7672c2917b92068a80927bf0d889fa4a
SHA1

f4ab83143d90bf714c875cff0f21a1a82a3b03e5
SHA256

50682b932c660c67a6fe47cd4ad0b8012021cbfa00ae572b0cdae750ae2a1b1c
SHA512

503a22f4ca51a81bab39c1eac277537c1ead599ef991513e47967cd065e9e44337bfc3dc7f0aaa98d27e0f53952a71d0fb5832f08778349bea8ee96d40ffa707
SSDEEP

6144:BflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:BflfAsiVGjSGecvX

Score

10^/10

Malware Config

Targets

- Target
  
  50682b932c660c67a6fe47cd4ad0b8012021cbfa00ae572b0cdae750ae2a1b1c
- Size
  
  361KB
- MD5
  
  7672c2917b92068a80927bf0d889fa4a
- SHA1
  
  f4ab83143d90bf714c875cff0f21a1a82a3b03e5
- SHA256
  
  50682b932c660c67a6fe47cd4ad0b8012021cbfa00ae572b0cdae750ae2a1b1c
- SHA512
  
  503a22f4ca51a81bab39c1eac277537c1ead599ef991513e47967cd065e9e44337bfc3dc7f0aaa98d27e0f53952a71d0fb5832f08778349bea8ee96d40ffa707
- SSDEEP
  
  6144:BflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:BflfAsiVGjSGecvX
Score

10^/10
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Command-Line Interface

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2