28a2a481394c649d01956a30d959bbe2a15071461ea1bbb4037bcdd721f7b9fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28a2a481394c649d01956a30d959bbe2a15071461ea1bbb4037bcdd721f7b9fe
Size

324KB
Sample

221101-lqf9baadf7
MD5

0515110cff488c93612481eb612b4262
SHA1

23f466e6394fb9f5feb9ab1fa96532ccd8a3190a
SHA256

28a2a481394c649d01956a30d959bbe2a15071461ea1bbb4037bcdd721f7b9fe
SHA512

4ba3e589c915e8d8f96263ca3ea98e5cef10193a3088cfd1c0d153856189fde5e6ea93093b637cbc343971be663bdfb7e2011bf0ccf707b5f327c88d4ec22847
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

8^/10

Malware Config

Targets

- Target
  
  28a2a481394c649d01956a30d959bbe2a15071461ea1bbb4037bcdd721f7b9fe
- Size
  
  324KB
- MD5
  
  0515110cff488c93612481eb612b4262
- SHA1
  
  23f466e6394fb9f5feb9ab1fa96532ccd8a3190a
- SHA256
  
  28a2a481394c649d01956a30d959bbe2a15071461ea1bbb4037bcdd721f7b9fe
- SHA512
  
  4ba3e589c915e8d8f96263ca3ea98e5cef10193a3088cfd1c0d153856189fde5e6ea93093b637cbc343971be663bdfb7e2011bf0ccf707b5f327c88d4ec22847
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

8^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1