948e0843ba507795d6fa325ff084b26539f5d7e1f33a565bf1b2502e161c1288 | Triage

Sharing

General

Target

948e0843ba507795d6fa325ff084b26539f5d7e1f33a565bf1b2502e161c1288
Size

328KB
Sample

230203-hcc3ysca65
MD5

ac476c8a61b0d0b5a6c9c2db566be011
SHA1

a580b85a76081d02a37ff807680757cffe4e321d
SHA256

948e0843ba507795d6fa325ff084b26539f5d7e1f33a565bf1b2502e161c1288
SHA512

775a83c5031d5e099c8ad84e52e9f7d98a901942e599d64e66944a60818e38b3430a094f03077fde6de82f8c52ff9e987372ebaf09d1f6a19b0fa94d0d9bc3db
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

7^/10

Malware Config

Targets

- Target
  
  948e0843ba507795d6fa325ff084b26539f5d7e1f33a565bf1b2502e161c1288
- Size
  
  328KB
- MD5
  
  ac476c8a61b0d0b5a6c9c2db566be011
- SHA1
  
  a580b85a76081d02a37ff807680757cffe4e321d
- SHA256
  
  948e0843ba507795d6fa325ff084b26539f5d7e1f33a565bf1b2502e161c1288
- SHA512
  
  775a83c5031d5e099c8ad84e52e9f7d98a901942e599d64e66944a60818e38b3430a094f03077fde6de82f8c52ff9e987372ebaf09d1f6a19b0fa94d0d9bc3db
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

7^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1