da5a459fcdba4e1909b6233e5ba248499fc14e77c6b30747f98e4ebc91617c2a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da5a459fcdba4e1909b6233e5ba248499fc14e77c6b30747f98e4ebc91617c2a
Size

323KB
Sample

221101-gj1bdsgeh8
MD5

e6a9073196fd70c285341b22706cf47b
SHA1

79c74e6350ae2db0a3616732d973b7fac8f7e67f
SHA256

da5a459fcdba4e1909b6233e5ba248499fc14e77c6b30747f98e4ebc91617c2a
SHA512

b9d990c8fb5238a857a425259fcdad31ca89326f5ccb2e175fadfeccc545be10cbc131bf15f7fdf1f9c6eb1ef102b11d572fdbb5fa640bfabc50672d26fcdda4
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

8^/10

Malware Config

Targets

- Target
  
  da5a459fcdba4e1909b6233e5ba248499fc14e77c6b30747f98e4ebc91617c2a
- Size
  
  323KB
- MD5
  
  e6a9073196fd70c285341b22706cf47b
- SHA1
  
  79c74e6350ae2db0a3616732d973b7fac8f7e67f
- SHA256
  
  da5a459fcdba4e1909b6233e5ba248499fc14e77c6b30747f98e4ebc91617c2a
- SHA512
  
  b9d990c8fb5238a857a425259fcdad31ca89326f5ccb2e175fadfeccc545be10cbc131bf15f7fdf1f9c6eb1ef102b11d572fdbb5fa640bfabc50672d26fcdda4
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

8^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1