cdbc1b4bfecfec6fa628e8a3bbb2c8ae0379cc3f6e2fdfb945e76f62bcb21310 | Triage

Sharing

General

Target

cdbc1b4bfecfec6fa628e8a3bbb2c8ae0379cc3f6e2fdfb945e76f62bcb21310
Size

361KB
Sample

221202-zzjyfsea49
MD5

7c43aa56025bdb9776d01681946cdf4c
SHA1

7866f83bab29d03cde330f8e4a3788a07f748e85
SHA256

cdbc1b4bfecfec6fa628e8a3bbb2c8ae0379cc3f6e2fdfb945e76f62bcb21310
SHA512

67e324e3bc272dfd7518a75acf753809cb364c5955de771d29371304d1441181fa9477a531b4ed203db213d8206f1bc23a098de7f979d16f9a82bf6d808f4e1c
SSDEEP

6144:aflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:aflfAsiVGjSGecvX

Score

10^/10

Malware Config

Targets

- Target
  
  cdbc1b4bfecfec6fa628e8a3bbb2c8ae0379cc3f6e2fdfb945e76f62bcb21310
- Size
  
  361KB
- MD5
  
  7c43aa56025bdb9776d01681946cdf4c
- SHA1
  
  7866f83bab29d03cde330f8e4a3788a07f748e85
- SHA256
  
  cdbc1b4bfecfec6fa628e8a3bbb2c8ae0379cc3f6e2fdfb945e76f62bcb21310
- SHA512
  
  67e324e3bc272dfd7518a75acf753809cb364c5955de771d29371304d1441181fa9477a531b4ed203db213d8206f1bc23a098de7f979d16f9a82bf6d808f4e1c
- SSDEEP
  
  6144:aflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:aflfAsiVGjSGecvX
Score

10^/10
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Command-Line Interface

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2