ebc7a922a9207a481faf455e4261feff9e86b1eecb37c27d8f471b82c85ec122 | Triage

Sharing

General

Target

ebc7a922a9207a481faf455e4261feff9e86b1eecb37c27d8f471b82c85ec122
Size

322KB
Sample

230902-fjwsjabb6s
MD5

756b0643cc3bc903185f3e6e9d0088bd
SHA1

cb762343b744668aeede87e83517b2b2ad67f6d4
SHA256

ebc7a922a9207a481faf455e4261feff9e86b1eecb37c27d8f471b82c85ec122
SHA512

02b5a619ee09efcff9976e94b88452b777db7240e5ed7cc9b3c804f2d17d5797137769d8f1b0ebe840508418144dd9a939b6cf9198e3d357e11097f5f72ed57c
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

7^/10

Malware Config

Targets

- Target
  
  ebc7a922a9207a481faf455e4261feff9e86b1eecb37c27d8f471b82c85ec122
- Size
  
  322KB
- MD5
  
  756b0643cc3bc903185f3e6e9d0088bd
- SHA1
  
  cb762343b744668aeede87e83517b2b2ad67f6d4
- SHA256
  
  ebc7a922a9207a481faf455e4261feff9e86b1eecb37c27d8f471b82c85ec122
- SHA512
  
  02b5a619ee09efcff9976e94b88452b777db7240e5ed7cc9b3c804f2d17d5797137769d8f1b0ebe840508418144dd9a939b6cf9198e3d357e11097f5f72ed57c
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

7^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2