e4b4ee368fde1939b9ff6190438eb6a6c7813124acd2640fec7f4d95f7836485 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e4b4ee368fde1939b9ff6190438eb6a6c7813124acd2640fec7f4d95f7836485
Size

329KB
Sample

230203-lrvs4adh68
MD5

455706c3204f2300feb9bc7128c9bf4f
SHA1

e4a9b9eee3d2914fc96e832c7235e39b769f6be5
SHA256

e4b4ee368fde1939b9ff6190438eb6a6c7813124acd2640fec7f4d95f7836485
SHA512

1d1db184139902d89703b2144a2779f9cd8fc0c5e8c269bf52fd9c4332582f6801d99fa50bdf1ba029b17e5c73e5e58e9fbfd16333cccdcd6248afb4b42aa870
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

7^/10

Malware Config

Targets

- Target
  
  e4b4ee368fde1939b9ff6190438eb6a6c7813124acd2640fec7f4d95f7836485
- Size
  
  329KB
- MD5
  
  455706c3204f2300feb9bc7128c9bf4f
- SHA1
  
  e4a9b9eee3d2914fc96e832c7235e39b769f6be5
- SHA256
  
  e4b4ee368fde1939b9ff6190438eb6a6c7813124acd2640fec7f4d95f7836485
- SHA512
  
  1d1db184139902d89703b2144a2779f9cd8fc0c5e8c269bf52fd9c4332582f6801d99fa50bdf1ba029b17e5c73e5e58e9fbfd16333cccdcd6248afb4b42aa870
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

7^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1