526354a7dee9fb6fe23aa7c2ed3b4f255f2e8643f60b1692487e90d92e2ad18b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

526354a7dee9fb6fe23aa7c2ed3b4f255f2e8643f60b1692487e90d92e2ad18b
Size

324KB
Sample

221101-kw35laahcm
MD5

69899508b8500dd6c76aab97655c2f75
SHA1

f282ae61541a140cfd9bfde17f7973008c6e5ac5
SHA256

526354a7dee9fb6fe23aa7c2ed3b4f255f2e8643f60b1692487e90d92e2ad18b
SHA512

a50e7ef69abaafab3591f73e93c751a1dbb275679910143d150dc4484a149f4344e76b4f88d1884e29a7cae09d472d5efcb0a3fdb4b29bc701ecf23df3451724
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

8^/10

Malware Config

Targets

- Target
  
  526354a7dee9fb6fe23aa7c2ed3b4f255f2e8643f60b1692487e90d92e2ad18b
- Size
  
  324KB
- MD5
  
  69899508b8500dd6c76aab97655c2f75
- SHA1
  
  f282ae61541a140cfd9bfde17f7973008c6e5ac5
- SHA256
  
  526354a7dee9fb6fe23aa7c2ed3b4f255f2e8643f60b1692487e90d92e2ad18b
- SHA512
  
  a50e7ef69abaafab3591f73e93c751a1dbb275679910143d150dc4484a149f4344e76b4f88d1884e29a7cae09d472d5efcb0a3fdb4b29bc701ecf23df3451724
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

8^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1