a66324850137c8975da144c09b68bccd7a2a1694da0b4e8c47d91d7ee7e633ab | Triage

Sharing

General

Target

a66324850137c8975da144c09b68bccd7a2a1694da0b4e8c47d91d7ee7e633ab
Size

324KB
Sample

221101-rasv3acdf8
MD5

1db9258828e68274415f6dcfc3bcc6fa
SHA1

434fe799b17a59fbce0cab7eb80444e974304960
SHA256

a66324850137c8975da144c09b68bccd7a2a1694da0b4e8c47d91d7ee7e633ab
SHA512

24a0eeb46bb90f88531182bc96818a3ceea045b1067ec7b82d0ec6935d67b76a2e3b943d767cbd05c76370e57d203f9fa702539ca66c21d2d6d12fc3dced392c
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

8^/10

Malware Config

Targets

- Target
  
  a66324850137c8975da144c09b68bccd7a2a1694da0b4e8c47d91d7ee7e633ab
- Size
  
  324KB
- MD5
  
  1db9258828e68274415f6dcfc3bcc6fa
- SHA1
  
  434fe799b17a59fbce0cab7eb80444e974304960
- SHA256
  
  a66324850137c8975da144c09b68bccd7a2a1694da0b4e8c47d91d7ee7e633ab
- SHA512
  
  24a0eeb46bb90f88531182bc96818a3ceea045b1067ec7b82d0ec6935d67b76a2e3b943d767cbd05c76370e57d203f9fa702539ca66c21d2d6d12fc3dced392c
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

8^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1