5c4f7a8833e16cd8415e317d58e851fdd0bed9060451618975e28a0d9b52b8ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c4f7a8833e16cd8415e317d58e851fdd0bed9060451618975e28a0d9b52b8ab
Size

324KB
Sample

221101-rf2p6addel
MD5

c29f6800d3d3a2ac3ca42ff3bf562c35
SHA1

f16d22b5533a9125463c0a0bf2bcbf9c9947f55d
SHA256

5c4f7a8833e16cd8415e317d58e851fdd0bed9060451618975e28a0d9b52b8ab
SHA512

f3fb7f77092785edddb3d464e5fa4532c7eff77328e9fe734629c00e0ff351ebeab7983b0f3cd79ccb3e32d21d301e8200368f950dc606a8b47527d7f8ff67a0
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

8^/10

Malware Config

Targets

- Target
  
  5c4f7a8833e16cd8415e317d58e851fdd0bed9060451618975e28a0d9b52b8ab
- Size
  
  324KB
- MD5
  
  c29f6800d3d3a2ac3ca42ff3bf562c35
- SHA1
  
  f16d22b5533a9125463c0a0bf2bcbf9c9947f55d
- SHA256
  
  5c4f7a8833e16cd8415e317d58e851fdd0bed9060451618975e28a0d9b52b8ab
- SHA512
  
  f3fb7f77092785edddb3d464e5fa4532c7eff77328e9fe734629c00e0ff351ebeab7983b0f3cd79ccb3e32d21d301e8200368f950dc606a8b47527d7f8ff67a0
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

8^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1