689b246593f0e8c5c8ac91d2ef9214a7cb8c865e5590a62230bd0232bcdeb79c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

689b246593f0e8c5c8ac91d2ef9214a7cb8c865e5590a62230bd0232bcdeb79c
Size

361KB
Sample

221203-wk6bcsfh7t
MD5

f9f40f5e067fdd7ddd9f31044c6d774b
SHA1

cd249fcff76dc9bf278c43423a723bc9f841b8e2
SHA256

689b246593f0e8c5c8ac91d2ef9214a7cb8c865e5590a62230bd0232bcdeb79c
SHA512

80aef6132b1769e40a3a6324dd9636c36febc80f93edfa33f851316bdb1d9e91af1102b3dae11965e1def013abc181891b7b670b5e2556dac4f044399414768b
SSDEEP

6144:yflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:yflfAsiVGjSGecvX

Score

10^/10

Malware Config

Targets

- Target
  
  689b246593f0e8c5c8ac91d2ef9214a7cb8c865e5590a62230bd0232bcdeb79c
- Size
  
  361KB
- MD5
  
  f9f40f5e067fdd7ddd9f31044c6d774b
- SHA1
  
  cd249fcff76dc9bf278c43423a723bc9f841b8e2
- SHA256
  
  689b246593f0e8c5c8ac91d2ef9214a7cb8c865e5590a62230bd0232bcdeb79c
- SHA512
  
  80aef6132b1769e40a3a6324dd9636c36febc80f93edfa33f851316bdb1d9e91af1102b3dae11965e1def013abc181891b7b670b5e2556dac4f044399414768b
- SSDEEP
  
  6144:yflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:yflfAsiVGjSGecvX
Score

10^/10
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Command-Line Interface

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2