816cc04b3668dd5e9922e9cf8fa3332006ace25045217581416e2ecb4bce5cb9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

816cc04b3668dd5e9922e9cf8fa3332006ace25045217581416e2ecb4bce5cb9
Size

324KB
Sample

221101-q9wwbsddak
MD5

41c05f548df1d43c22fc2f07b65b0830
SHA1

5b98e37ad41fe6861ceaddaf4419109ccd8d1be9
SHA256

816cc04b3668dd5e9922e9cf8fa3332006ace25045217581416e2ecb4bce5cb9
SHA512

03b23645499c5afb893c6bf475df5e554dbac7eb93a0e028e3396aeaf5dfc79f24b764773f7b1afd72b295d1f5722b8dc465580bd6f703ee40b7e2294a1e5250
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

8^/10

Malware Config

Targets

- Target
  
  816cc04b3668dd5e9922e9cf8fa3332006ace25045217581416e2ecb4bce5cb9
- Size
  
  324KB
- MD5
  
  41c05f548df1d43c22fc2f07b65b0830
- SHA1
  
  5b98e37ad41fe6861ceaddaf4419109ccd8d1be9
- SHA256
  
  816cc04b3668dd5e9922e9cf8fa3332006ace25045217581416e2ecb4bce5cb9
- SHA512
  
  03b23645499c5afb893c6bf475df5e554dbac7eb93a0e028e3396aeaf5dfc79f24b764773f7b1afd72b295d1f5722b8dc465580bd6f703ee40b7e2294a1e5250
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

8^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1