56c58a3148bd491c55f95a63d8e5a59a1964513fa24df07210813af0eca45124 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56c58a3148bd491c55f95a63d8e5a59a1964513fa24df07210813af0eca45124
Size

1.7MB
Sample

231009-ff72dsad7t
MD5

01dbf21d2f24f9087733119dacec9518
SHA1

f177fdac91e6b884f96883a97ac7e57926b842c6
SHA256

56c58a3148bd491c55f95a63d8e5a59a1964513fa24df07210813af0eca45124
SHA512

2958936f840b379316c7ae3aa68b7727ce3b88b2619311f5625487970ea64e988f64acef3fdf5e4e499d27d30ab49a7ecef967c3e2f5bea7973f7a0a0669277c
SSDEEP

24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

Score

7^/10

Malware Config

Targets

- Target
  
  56c58a3148bd491c55f95a63d8e5a59a1964513fa24df07210813af0eca45124
- Size
  
  1.7MB
- MD5
  
  01dbf21d2f24f9087733119dacec9518
- SHA1
  
  f177fdac91e6b884f96883a97ac7e57926b842c6
- SHA256
  
  56c58a3148bd491c55f95a63d8e5a59a1964513fa24df07210813af0eca45124
- SHA512
  
  2958936f840b379316c7ae3aa68b7727ce3b88b2619311f5625487970ea64e988f64acef3fdf5e4e499d27d30ab49a7ecef967c3e2f5bea7973f7a0a0669277c
- SSDEEP
  
  24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV
Score

7^/10
- Executes dropped EXE
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2