bbb12e576d0ed656e703d6e25c198af0480c4def9d22e490c3e6a8ebebac071a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbb12e576d0ed656e703d6e25c198af0480c4def9d22e490c3e6a8ebebac071a
Size

325KB
Sample

221101-t229xsecgp
MD5

ffb8f10247b90916240bcc9a841c1876
SHA1

b4e0244124660edafd014cf1d3dc051ccbb38a7e
SHA256

bbb12e576d0ed656e703d6e25c198af0480c4def9d22e490c3e6a8ebebac071a
SHA512

611a690e492f89dec6c31dc6d3d70d9ff19345d662884cd2019133ca544d193540d9f38068861af6d3d1ab71fbe6227f4b668fe611c91bd1549c6de7afde6085
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

8^/10

Malware Config

Targets

- Target
  
  bbb12e576d0ed656e703d6e25c198af0480c4def9d22e490c3e6a8ebebac071a
- Size
  
  325KB
- MD5
  
  ffb8f10247b90916240bcc9a841c1876
- SHA1
  
  b4e0244124660edafd014cf1d3dc051ccbb38a7e
- SHA256
  
  bbb12e576d0ed656e703d6e25c198af0480c4def9d22e490c3e6a8ebebac071a
- SHA512
  
  611a690e492f89dec6c31dc6d3d70d9ff19345d662884cd2019133ca544d193540d9f38068861af6d3d1ab71fbe6227f4b668fe611c91bd1549c6de7afde6085
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

8^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1