1ac444908f60e7cd5df12027d0fb303af5d58a64f48815dbc62ee65f5a09e290 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ac444908f60e7cd5df12027d0fb303af5d58a64f48815dbc62ee65f5a09e290
Size

324KB
Sample

221101-plh4wscgdp
MD5

334abf0fcb6edad4ce22f74981c95894
SHA1

bf1e8797ea9b06151424aa1e144fe7df4b8df76e
SHA256

1ac444908f60e7cd5df12027d0fb303af5d58a64f48815dbc62ee65f5a09e290
SHA512

6a37f50306fb6d29cd95420f033d96382879aab4b5fde257622fe0512a19f70245a27cc735060bfb76ed0cbbdb8100071fcf7e7b93a4e04a9a68c01cd0b3b782
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

8^/10

Malware Config

Targets

- Target
  
  1ac444908f60e7cd5df12027d0fb303af5d58a64f48815dbc62ee65f5a09e290
- Size
  
  324KB
- MD5
  
  334abf0fcb6edad4ce22f74981c95894
- SHA1
  
  bf1e8797ea9b06151424aa1e144fe7df4b8df76e
- SHA256
  
  1ac444908f60e7cd5df12027d0fb303af5d58a64f48815dbc62ee65f5a09e290
- SHA512
  
  6a37f50306fb6d29cd95420f033d96382879aab4b5fde257622fe0512a19f70245a27cc735060bfb76ed0cbbdb8100071fcf7e7b93a4e04a9a68c01cd0b3b782
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

8^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1