82126fc4fd73e4fea6ee032f156572af9986acdc8c22f1f69253289a3b39b150 | Triage

Resubmissions

24-11-2022 00:47

221124-a5b3csgb32 8

23-11-2022 22:18

221123-17x1qahb48 8

Sharing

General

Target

82126fc4fd73e4fea6ee032f156572af9986acdc8c22f1f69253289a3b39b150
Size

5.2MB
Sample

221123-17x1qahb48
MD5

65bc10aa24d76ec1b02a151a16d053c0
SHA1

81bfa89a47ef789ea1cc5c98f02df2bc2a038a4e
SHA256

82126fc4fd73e4fea6ee032f156572af9986acdc8c22f1f69253289a3b39b150
SHA512

b0e22e0050090d6f8bc9ae8291005e406d3ab3ea60976aa9394f2c37f59645d8df0ddca7dfe927b0f604428092778da3a3a968da11bc73ea042dfc87d7b9d298
SSDEEP

98304:VXISESTXsUp7ZcjxlqSs/eAFe6WgdLzjnezZED:Vr5sjjxcz20pz6zZm

Score

8^/10

Malware Config

Targets

- Target
  
  82126fc4fd73e4fea6ee032f156572af9986acdc8c22f1f69253289a3b39b150
- Size
  
  5.2MB
- MD5
  
  65bc10aa24d76ec1b02a151a16d053c0
- SHA1
  
  81bfa89a47ef789ea1cc5c98f02df2bc2a038a4e
- SHA256
  
  82126fc4fd73e4fea6ee032f156572af9986acdc8c22f1f69253289a3b39b150
- SHA512
  
  b0e22e0050090d6f8bc9ae8291005e406d3ab3ea60976aa9394f2c37f59645d8df0ddca7dfe927b0f604428092778da3a3a968da11bc73ea042dfc87d7b9d298
- SSDEEP
  
  98304:VXISESTXsUp7ZcjxlqSs/eAFe6WgdLzjnezZED:Vr5sjjxcz20pz6zZm
Score

8^/10
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2