f221b105971cf5fe4500bb1c77d737b412bed88487e07a054b2f09d8678ba19e | Triage

Sharing

General

Target

f221b105971cf5fe4500bb1c77d737b412bed88487e07a054b2f09d8678ba19e
Size

321KB
Sample

230807-ffsxgadf39
MD5

752e135e9db4e0970ecce646378c28f2
SHA1

656ed5c240650b320ff8f65e2d264a21d5cc50ff
SHA256

f221b105971cf5fe4500bb1c77d737b412bed88487e07a054b2f09d8678ba19e
SHA512

cfa8d98928b69471dc5a37704eed256134f1d83b81171e27b8a055c42a589cbe8c22464fd12423ec24c5b02597cd4e6d3ed16b4820643b70805c0c5c54aefa48
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

7^/10

Malware Config

Targets

- Target
  
  f221b105971cf5fe4500bb1c77d737b412bed88487e07a054b2f09d8678ba19e
- Size
  
  321KB
- MD5
  
  752e135e9db4e0970ecce646378c28f2
- SHA1
  
  656ed5c240650b320ff8f65e2d264a21d5cc50ff
- SHA256
  
  f221b105971cf5fe4500bb1c77d737b412bed88487e07a054b2f09d8678ba19e
- SHA512
  
  cfa8d98928b69471dc5a37704eed256134f1d83b81171e27b8a055c42a589cbe8c22464fd12423ec24c5b02597cd4e6d3ed16b4820643b70805c0c5c54aefa48
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

7^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2