2bc357dd5352be349d6829a1e0744332e8fa9088c8ea44274f6c4e9e1ef292e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bc357dd5352be349d6829a1e0744332e8fa9088c8ea44274f6c4e9e1ef292e4
Size

324KB
Sample

221101-nehzwabcg4
MD5

99a0f321cbbdedb447ec7c15467b2ec4
SHA1

79ef2fe3b2ee4ed3c739e06a4c77ffd56e1ae255
SHA256

2bc357dd5352be349d6829a1e0744332e8fa9088c8ea44274f6c4e9e1ef292e4
SHA512

8c0ce88d0ec5aa8b47d4ba034e7ff96736992752415dae988f74dd78d8015068719b61d53bd9e20c209512c642ae8715376ca2582f5739b6f97f26b24370b824
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

8^/10

Malware Config

Targets

- Target
  
  2bc357dd5352be349d6829a1e0744332e8fa9088c8ea44274f6c4e9e1ef292e4
- Size
  
  324KB
- MD5
  
  99a0f321cbbdedb447ec7c15467b2ec4
- SHA1
  
  79ef2fe3b2ee4ed3c739e06a4c77ffd56e1ae255
- SHA256
  
  2bc357dd5352be349d6829a1e0744332e8fa9088c8ea44274f6c4e9e1ef292e4
- SHA512
  
  8c0ce88d0ec5aa8b47d4ba034e7ff96736992752415dae988f74dd78d8015068719b61d53bd9e20c209512c642ae8715376ca2582f5739b6f97f26b24370b824
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

8^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1