6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf | Triage

Sharing

General

Target

CabCFBF.tmp
Size

61KB
Sample

231017-syhwfaed98
MD5

f3441b8572aae8801c04f3060b550443
SHA1

4ef0a35436125d6821831ef36c28ffaf196cda15
SHA256

6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf
SHA512

5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9
SSDEEP

1536:RfhMeKBlsociYZAT+4oGNk2rb2oX3bUH+uOlEU:RhV0WXvAa4XNoeudU

Score

8^/10

Malware Config

Targets

- Target
  
  CabCFBF.tmp
- Size
  
  61KB
- MD5
  
  f3441b8572aae8801c04f3060b550443
- SHA1
  
  4ef0a35436125d6821831ef36c28ffaf196cda15
- SHA256
  
  6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf
- SHA512
  
  5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9
- SSDEEP
  
  1536:RfhMeKBlsociYZAT+4oGNk2rb2oX3bUH+uOlEU:RhV0WXvAa4XNoeudU
Score

1^/10
behavioral1 behavioral2
- Target
  
  authroot.stl
- Size
  
  163KB
- MD5
  
  9441737383d21192400eca82fda910ec
- SHA1
  
  725e0d606a4fc9ba44aa8ffde65bed15e65367e4
- SHA256
  
  bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5
- SHA512
  
  7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf
- SSDEEP
  
  1536:AA8JXlCUs0RvWqgCyPW5BXNWdm1wpyru2/3EwjYoz0VDTrubmt6t+:AtJXq0RuXCyfdmAyru2/RAKtU
Score

8^/10
- Blocklisted process makes network request
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4