e876f95d34250af8555dc7d71431faa35cd2a0951bba8e5740b2b3f813f5d428 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e876f95d34250af8555dc7d71431faa35cd2a0951bba8e5740b2b3f813f5d428_JC.rar
Size

602KB
Sample

231003-srxq1scg4z
MD5

57a3107f1b46914bf7c97ecd86c3093b
SHA1

46414f8f962750034022739457989c99798b7492
SHA256

e876f95d34250af8555dc7d71431faa35cd2a0951bba8e5740b2b3f813f5d428
SHA512

79a9a5567b5b0ef51dcb7da78394d548679c1c5639f2181e992d82d346e78b155dd83f46ceb92d16ceb5b199230b60ddc8fb2ce79265a51227961439b7ed0c8d
SSDEEP

12288:TXZeZyCRmttRa1UgjWUlShppQ1Yh10pRO9EbqYBhty1mUIN/lm/lZlI1:zsIHa1UgyUS7u2huOOzt2Cdqe1

Score

7^/10

Malware Config

Targets

- Target
  
  Opened Orders And Overdue Amount As At 10th september 2023.exe
- Size
  
  657KB
- MD5
  
  1ed5ad3e9e507982677854ddffae0bfc
- SHA1
  
  3e8db21fa24be973521f87bb3076f55390fc3622
- SHA256
  
  457b41f6e8645142562a0cc19dfc477ac19b9f39be9dcafa631f8fbf5c1ad34b
- SHA512
  
  06431b6f96124f7328537cb9c25e28bc747d02e988ce7be83b6bfb62010b3a0ebf2c64caacadc021c37bb3131657afa66223b201fa4f18d0b06736c7cd792178
- SSDEEP
  
  12288:tpmNumB0apppiZ/5bP9fU7re+s3oLSPGi7l96MEQGNVVQVsk/yBiXsLRA9v8Cp:Xty3DWRbVfGKjR5hTGNQuk/ycXyA9v8a
Score

7^/10
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2