b7d3fdd4dc96acdb7e525f437596c250508cd5912b6a45366445568567af8ca7 | Triage

Sharing

General

Target

b7d3fdd4dc96acdb7e525f437596c250508cd5912b6a45366445568567af8ca7
Size

361KB
Sample

221205-yxa24acb43
MD5

479095d4c4cceb28970cec5e653a4292
SHA1

4387b1f7964a5f6cf273319217615f2c79b788dc
SHA256

b7d3fdd4dc96acdb7e525f437596c250508cd5912b6a45366445568567af8ca7
SHA512

d34e23190aa742f4ff20384f931fc9636d05e06d11a2c44f7b0b5948a0a5f72b4fe8b1158f4ba5cd9094cdbaa16f077f26d1db2a7a5da259b354f786b20bb836
SSDEEP

6144:WflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:WflfAsiVGjSGecvX

Score

10^/10

Malware Config

Targets

- Target
  
  b7d3fdd4dc96acdb7e525f437596c250508cd5912b6a45366445568567af8ca7
- Size
  
  361KB
- MD5
  
  479095d4c4cceb28970cec5e653a4292
- SHA1
  
  4387b1f7964a5f6cf273319217615f2c79b788dc
- SHA256
  
  b7d3fdd4dc96acdb7e525f437596c250508cd5912b6a45366445568567af8ca7
- SHA512
  
  d34e23190aa742f4ff20384f931fc9636d05e06d11a2c44f7b0b5948a0a5f72b4fe8b1158f4ba5cd9094cdbaa16f077f26d1db2a7a5da259b354f786b20bb836
- SSDEEP
  
  6144:WflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:WflfAsiVGjSGecvX
Score

10^/10
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Command-Line Interface

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2