27a2a70a219a6c209178d7ff338bab14030ac1b71e20f44f80a8dd9122dee243 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27a2a70a219a6c209178d7ff338bab14030ac1b71e20f44f80a8dd9122dee243
Size

323KB
Sample

221101-djwresfea3
MD5

b53b9cc7c852cb52d01531c257059ccc
SHA1

bb2bc8c9a647cdcf35ab656ae92493aef5008934
SHA256

27a2a70a219a6c209178d7ff338bab14030ac1b71e20f44f80a8dd9122dee243
SHA512

a9d84bba13546e029a84f687d63fe8a6419381640db5a032f9fd3d596b658173ce3b5c6a7a0f16fe35685b1274996d86badb9fb21944b75add3b5ba2f2c38203
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

8^/10

Malware Config

Targets

- Target
  
  27a2a70a219a6c209178d7ff338bab14030ac1b71e20f44f80a8dd9122dee243
- Size
  
  323KB
- MD5
  
  b53b9cc7c852cb52d01531c257059ccc
- SHA1
  
  bb2bc8c9a647cdcf35ab656ae92493aef5008934
- SHA256
  
  27a2a70a219a6c209178d7ff338bab14030ac1b71e20f44f80a8dd9122dee243
- SHA512
  
  a9d84bba13546e029a84f687d63fe8a6419381640db5a032f9fd3d596b658173ce3b5c6a7a0f16fe35685b1274996d86badb9fb21944b75add3b5ba2f2c38203
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

8^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1