a56c28fc721104b84c8915091d24b35acd713b1706777ae5cbd1cb84d8c6d804 | Triage

Sharing

General

Target

Cab5C06.tmp_pw_infected.zip
Size

61KB
Sample

231018-rjckfage54
MD5

c37e120c09207c135b2409b19d4947dc
SHA1

012ce7ce485bea01f20e70d93ab11b8b7b00ecce
SHA256

a56c28fc721104b84c8915091d24b35acd713b1706777ae5cbd1cb84d8c6d804
SHA512

bd97261032092099eeafe49868d7794132f1988c704da292c89d4cce80b953b3bbf55689c54ca961195242e2b27df6034d06bbc09d72684da4fb4664312ebee7
SSDEEP

1536:Kpg4hUEm4Gtqd0QRd+hjObM88Ng2oyliVq8:N4hrJGtC0PhCPYlsB

Score

8^/10

Malware Config

Targets

- Target
  
  0x0006000000016ae1-15
- Size
  
  61KB
- MD5
  
  f3441b8572aae8801c04f3060b550443
- SHA1
  
  4ef0a35436125d6821831ef36c28ffaf196cda15
- SHA256
  
  6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf
- SHA512
  
  5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9
- SSDEEP
  
  1536:RfhMeKBlsociYZAT+4oGNk2rb2oX3bUH+uOlEU:RhV0WXvAa4XNoeudU
Score

1^/10
behavioral1 behavioral2
- Target
  
  authroot.stl
- Size
  
  163KB
- MD5
  
  9441737383d21192400eca82fda910ec
- SHA1
  
  725e0d606a4fc9ba44aa8ffde65bed15e65367e4
- SHA256
  
  bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5
- SHA512
  
  7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf
- SSDEEP
  
  1536:AA8JXlCUs0RvWqgCyPW5BXNWdm1wpyru2/3EwjYoz0VDTrubmt6t+:AtJXq0RuXCyfdmAyru2/RAKtU
Score

8^/10
- Blocklisted process makes network request
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4