b21a26eb5e40de77f279dd9a96078b9d9236d3cb6cfaf2762c19a0e97efa4675 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b21a26eb5e40de77f279dd9a96078b9d9236d3cb6cfaf2762c19a0e97efa4675
Size

322KB
Sample

221031-3gsz7afbbk
MD5

dfa04494e4b254bf03e6567fcafe4d90
SHA1

cce2d1c57700a9bbabf046046976f97013b25c88
SHA256

b21a26eb5e40de77f279dd9a96078b9d9236d3cb6cfaf2762c19a0e97efa4675
SHA512

fc1773e208e3890b34a0096b035943a5d031ffc9283eb9cb7d732959d14010976eb3f5f854065d78001f4d85e6294e6257a4ff70b886565cc2525be5b1342ab3
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

8^/10

Malware Config

Targets

- Target
  
  b21a26eb5e40de77f279dd9a96078b9d9236d3cb6cfaf2762c19a0e97efa4675
- Size
  
  322KB
- MD5
  
  dfa04494e4b254bf03e6567fcafe4d90
- SHA1
  
  cce2d1c57700a9bbabf046046976f97013b25c88
- SHA256
  
  b21a26eb5e40de77f279dd9a96078b9d9236d3cb6cfaf2762c19a0e97efa4675
- SHA512
  
  fc1773e208e3890b34a0096b035943a5d031ffc9283eb9cb7d732959d14010976eb3f5f854065d78001f4d85e6294e6257a4ff70b886565cc2525be5b1342ab3
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

8^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1