4f0ac3c5044699eaa4b05c0ef07d473edf86eac732df5304dc0c42fc4349d6d1 | Triage

Sharing

General

Target

4f0ac3c5044699eaa4b05c0ef07d473edf86eac732df5304dc0c42fc4349d6d1
Size

4.2MB
Sample

230306-hzym6sae5w
MD5

a37810cc29d9cfa64243c40ad8a5c3df
SHA1

a4a57a48d8436c859d524b9223710008f7c5e1ad
SHA256

4f0ac3c5044699eaa4b05c0ef07d473edf86eac732df5304dc0c42fc4349d6d1
SHA512

7db726cbc72ee93ee076a1a01913753bd3f722ba1c660281223d7939d1ad5fecf8e593b39e47d2bd15975d5f9796d059bde7eb87e8d3e087dad3e2818613644f
SSDEEP

98304:BEhTEG4s2Rk5cs38shhSNjJe+i4sYeq69DedTV0VbTXF2RAvRthw:BRG4sskf38s7MjJeVYT69id+VbaMc

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4f0ac3c5044699eaa4b05c0ef07d473edf86eac732df5304dc0c42fc4349d6d1
- Size
  
  4.2MB
- MD5
  
  a37810cc29d9cfa64243c40ad8a5c3df
- SHA1
  
  a4a57a48d8436c859d524b9223710008f7c5e1ad
- SHA256
  
  4f0ac3c5044699eaa4b05c0ef07d473edf86eac732df5304dc0c42fc4349d6d1
- SHA512
  
  7db726cbc72ee93ee076a1a01913753bd3f722ba1c660281223d7939d1ad5fecf8e593b39e47d2bd15975d5f9796d059bde7eb87e8d3e087dad3e2818613644f
- SSDEEP
  
  98304:BEhTEG4s2Rk5cs38shhSNjJe+i4sYeq69DedTV0VbTXF2RAvRthw:BRG4sskf38s7MjJeVYT69id+VbaMc
Score

7^/10

discovery
- Executes dropped EXE
- Modifies file permissions
  discovery
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1