10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b | Triage

Sharing

General

Target

authrootstl.cab
Size

61KB
Sample

230202-awl6zadg34
MD5

fc4666cbca561e864e7fdf883a9e6661
SHA1

2f8d6094c7a34bf12ea0bbf0d51ee9c5bb7939a5
SHA256

10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b
SHA512

c71f54b571e01f247f072be4bbebdf5d8410b67eb79a61e7e0d9853fe857ab9bd12f53e6af3394b935560178107291fc4be351b27deb388eba90ba949633d57d
SSDEEP

1536:pvl2gmukMiArbge/oKIxf+Q9yNJLaRCfIElhUuDz:pvl2gmZhpehIxfJsJLawfIElhUu3

Score

8^/10

Malware Config

Targets

- Target
  
  authrootstl.cab
- Size
  
  61KB
- MD5
  
  fc4666cbca561e864e7fdf883a9e6661
- SHA1
  
  2f8d6094c7a34bf12ea0bbf0d51ee9c5bb7939a5
- SHA256
  
  10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b
- SHA512
  
  c71f54b571e01f247f072be4bbebdf5d8410b67eb79a61e7e0d9853fe857ab9bd12f53e6af3394b935560178107291fc4be351b27deb388eba90ba949633d57d
- SSDEEP
  
  1536:pvl2gmukMiArbge/oKIxf+Q9yNJLaRCfIElhUuDz:pvl2gmZhpehIxfJsJLawfIElhUu3
Score

1^/10
behavioral1 behavioral2
- Target
  
  authroot.stl
- Size
  
  161KB
- MD5
  
  73b4b714b42fc9a6aaefd0ae59adb009
- SHA1
  
  efdaffd5b0ad21913d22001d91bf6c19ecb4ac41
- SHA256
  
  c0cf8cc04c34b5b80a2d86ad0eafb2dd71436f070c86b0321fba0201879625fd
- SHA512
  
  73af3c51b15f89237552b1718bef21fd80788fa416bab2cb2e7fb3a60d56249a716eda0d2dd68ab643752272640e7eaaaf57ce64bcb38373ddc3d035fb8d57cd
- SSDEEP
  
  1536:glJXlCUsGRvk/99SFrdW5ib1NWdm1wpzru2RfEyjYZjCQavSmt6t9:glJXqGRI0Sdm0zru2RUjCjvyz
Score

8^/10
- Blocklisted process makes network request
behavioral3 behavioral4

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4