04b6589982dd704bb2f3738fb67f84f492f737d84cf6aeac2a2104207b43bee7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04b6589982dd704bb2f3738fb67f84f492f737d84cf6aeac2a2104207b43bee7
Size

322KB
Sample

231012-145w6ada9z
MD5

12afa304c20ed801a375149e783f410d
SHA1

4e739b724c8b0a5cbb521da8c9b00ae8613c5dba
SHA256

04b6589982dd704bb2f3738fb67f84f492f737d84cf6aeac2a2104207b43bee7
SHA512

2fbdd9c4b27463aa24f8ad669edd939081e2ff0cc863934da11ef27ea3dcb4df512cb97d7db4e8bc18eb88ccc5ed25981612e842fdce9f77f2b3f15327d2cb4c
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

7^/10

Malware Config

Targets

- Target
  
  04b6589982dd704bb2f3738fb67f84f492f737d84cf6aeac2a2104207b43bee7
- Size
  
  322KB
- MD5
  
  12afa304c20ed801a375149e783f410d
- SHA1
  
  4e739b724c8b0a5cbb521da8c9b00ae8613c5dba
- SHA256
  
  04b6589982dd704bb2f3738fb67f84f492f737d84cf6aeac2a2104207b43bee7
- SHA512
  
  2fbdd9c4b27463aa24f8ad669edd939081e2ff0cc863934da11ef27ea3dcb4df512cb97d7db4e8bc18eb88ccc5ed25981612e842fdce9f77f2b3f15327d2cb4c
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

7^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2