b42ccb85bcf7e9e35582368e5a0edaf7f672568a161665e6b65124bd2496422a | Triage

Sharing

General

Target

b42ccb85bcf7e9e35582368e5a0edaf7f672568a161665e6b65124bd2496422a
Size

322KB
Sample

231011-sy8f4ahh44
MD5

2d9b42aa6232660f5e8df61226f10446
SHA1

4de7acda64b901fc62f4e0bbd7f4a6c41e583c1a
SHA256

b42ccb85bcf7e9e35582368e5a0edaf7f672568a161665e6b65124bd2496422a
SHA512

70ed5ddb8ec839521016a0bb7ef65c7ad402b5eefbba252376f3ce0ee5e4afb5be87b957fb65c662a750a4ebf5fb414a6bbea0a1f8c4017bf8ce9679b40e6c94
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

7^/10

Malware Config

Targets

- Target
  
  b42ccb85bcf7e9e35582368e5a0edaf7f672568a161665e6b65124bd2496422a
- Size
  
  322KB
- MD5
  
  2d9b42aa6232660f5e8df61226f10446
- SHA1
  
  4de7acda64b901fc62f4e0bbd7f4a6c41e583c1a
- SHA256
  
  b42ccb85bcf7e9e35582368e5a0edaf7f672568a161665e6b65124bd2496422a
- SHA512
  
  70ed5ddb8ec839521016a0bb7ef65c7ad402b5eefbba252376f3ce0ee5e4afb5be87b957fb65c662a750a4ebf5fb414a6bbea0a1f8c4017bf8ce9679b40e6c94
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

7^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2