c491d5a2570fcc3e3d396bcc63d5142643359e96b7ae48b0242d4448f7f9a26a | Triage

Sharing

General

Target

c491d5a2570fcc3e3d396bcc63d5142643359e96b7ae48b0242d4448f7f9a26a
Size

328KB
Sample

221103-wmxf8sdcg2
MD5

9001cbd671ee55f4aebd2a39512fdc95
SHA1

8bf2ab6a76721d09023b1d224d6d66dcae08d8fc
SHA256

c491d5a2570fcc3e3d396bcc63d5142643359e96b7ae48b0242d4448f7f9a26a
SHA512

b1c58029f78723b0417d4cc65eadff794b9c3a591df4efd62cbe4f8a1fc385f339d9adb09480a017078e65d3c223633caf1b60b5de038dabd775d4dff373b0e8
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

8^/10

Malware Config

Targets

- Target
  
  c491d5a2570fcc3e3d396bcc63d5142643359e96b7ae48b0242d4448f7f9a26a
- Size
  
  328KB
- MD5
  
  9001cbd671ee55f4aebd2a39512fdc95
- SHA1
  
  8bf2ab6a76721d09023b1d224d6d66dcae08d8fc
- SHA256
  
  c491d5a2570fcc3e3d396bcc63d5142643359e96b7ae48b0242d4448f7f9a26a
- SHA512
  
  b1c58029f78723b0417d4cc65eadff794b9c3a591df4efd62cbe4f8a1fc385f339d9adb09480a017078e65d3c223633caf1b60b5de038dabd775d4dff373b0e8
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

8^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1