General

  • Target

    73557f951c8ba2fc75b66565e5838613c06ca818cfeeea84d0f15a38f7fa2c89

  • Size

    227KB

  • Sample

    221226-y1akqsgh9x

  • MD5

    9961e39886a8752af52e130c201e8e5f

  • SHA1

    6ef7f49550f7c045b433e6c847d04925571191f9

  • SHA256

    73557f951c8ba2fc75b66565e5838613c06ca818cfeeea84d0f15a38f7fa2c89

  • SHA512

    39b60dbaafdd65418f1424cfe342c49c23f3eb2f90f2a5aedb76dd794dba4840c0dbff75029e3118c84e9c75cb822ecf2ac7dc76fc1b816009b51f129f4f684a

  • SSDEEP

    3072:3RB/Lda2of958h0aE1NMsXdbKellEotzjLptGqSQ+V+Y700:bLpokqFTMWVKI2wHHSQ+Vl7l

Score
8/10

Malware Config

Targets

    • Target

      73557f951c8ba2fc75b66565e5838613c06ca818cfeeea84d0f15a38f7fa2c89

    • Size

      227KB

    • MD5

      9961e39886a8752af52e130c201e8e5f

    • SHA1

      6ef7f49550f7c045b433e6c847d04925571191f9

    • SHA256

      73557f951c8ba2fc75b66565e5838613c06ca818cfeeea84d0f15a38f7fa2c89

    • SHA512

      39b60dbaafdd65418f1424cfe342c49c23f3eb2f90f2a5aedb76dd794dba4840c0dbff75029e3118c84e9c75cb822ecf2ac7dc76fc1b816009b51f129f4f684a

    • SSDEEP

      3072:3RB/Lda2of958h0aE1NMsXdbKellEotzjLptGqSQ+V+Y700:bLpokqFTMWVKI2wHHSQ+Vl7l

    Score
    8/10
    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks