ad3a51a9582304c3fa5c342ed215c9bf45c252145cc069f43c454c5a200a044e | Triage

Sharing

General

Target

ad3a51a9582304c3fa5c342ed215c9bf45c252145cc069f43c454c5a200a044e
Size

110KB
Sample

221205-k6kq1aec28
MD5

3b583c9f616ebe0bf1bdb31c45cce2d3
SHA1

2060532701285b62ed897afa7558ec4575e8f01f
SHA256

ad3a51a9582304c3fa5c342ed215c9bf45c252145cc069f43c454c5a200a044e
SHA512

c7a59949bad248f815ec3919f3aae44e9b0920fae24e617164124b564aecd78aba672b2de5d5256a8af78612aa2cae02172ebfc5af875a72db3509aa7e6a850d
SSDEEP

1536:dTKdhmMFi+lokn0CcuQpuv0Ix0vkHWR8ceQDxeOk:dT8cUi20DuQpKnsMkrBk

Score

8^/10

Malware Config

Targets

- Target
  
  ad3a51a9582304c3fa5c342ed215c9bf45c252145cc069f43c454c5a200a044e
- Size
  
  110KB
- MD5
  
  3b583c9f616ebe0bf1bdb31c45cce2d3
- SHA1
  
  2060532701285b62ed897afa7558ec4575e8f01f
- SHA256
  
  ad3a51a9582304c3fa5c342ed215c9bf45c252145cc069f43c454c5a200a044e
- SHA512
  
  c7a59949bad248f815ec3919f3aae44e9b0920fae24e617164124b564aecd78aba672b2de5d5256a8af78612aa2cae02172ebfc5af875a72db3509aa7e6a850d
- SSDEEP
  
  1536:dTKdhmMFi+lokn0CcuQpuv0Ix0vkHWR8ceQDxeOk:dT8cUi20DuQpKnsMkrBk
Score

8^/10
- Executes dropped EXE
- Loads dropped DLL
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2