aef3792c37a52ffcea80a2bd9ac32bc2899c2b3f145ace8359af7cdc3790be01 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aef3792c37a52ffcea80a2bd9ac32bc2899c2b3f145ace8359af7cdc3790be01
Size

324KB
Sample

221101-rbsxfscdg9
MD5

561fe38511462d0a635393102e8f44be
SHA1

7b5cad7e4e31926d6cffae8d00bea928ec60bc3b
SHA256

aef3792c37a52ffcea80a2bd9ac32bc2899c2b3f145ace8359af7cdc3790be01
SHA512

bc8943dc7212aaefcc86c27a667540d3c7973e66c1e0eb6319a566340f9ccaf53a1a882c645de896fbf30120f732f3cec2bc6ec79f1494b1da5c4c28b20ac61a
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

8^/10

Malware Config

Targets

- Target
  
  aef3792c37a52ffcea80a2bd9ac32bc2899c2b3f145ace8359af7cdc3790be01
- Size
  
  324KB
- MD5
  
  561fe38511462d0a635393102e8f44be
- SHA1
  
  7b5cad7e4e31926d6cffae8d00bea928ec60bc3b
- SHA256
  
  aef3792c37a52ffcea80a2bd9ac32bc2899c2b3f145ace8359af7cdc3790be01
- SHA512
  
  bc8943dc7212aaefcc86c27a667540d3c7973e66c1e0eb6319a566340f9ccaf53a1a882c645de896fbf30120f732f3cec2bc6ec79f1494b1da5c4c28b20ac61a
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

8^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1