4464a77c53c1f590094cd04c3d1e750011bfeca4da0331fb06bbd3b8aba3f7da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5f65626534da39a0c0ad5cd15a760d90.exe
Size

885KB
Sample

231028-ymzbyaga4x
MD5

5f65626534da39a0c0ad5cd15a760d90
SHA1

6ab0542a76d0b7ecea8b2ff5f4e76a0a0f8205a3
SHA256

4464a77c53c1f590094cd04c3d1e750011bfeca4da0331fb06bbd3b8aba3f7da
SHA512

bc09467a85aae09fe1da841f578d8e404e63eeb8a3dba38f5bb561851c3112da1b89dc55ba6d45a8e6741ad8e3f9a4eed8ca594e7bbc7249d87ee7aea76e22a7
SSDEEP

12288:DRcljBvw0GKoScY80H80EYypQJTrNjnuLqaMUkV9kZAtq6ajTSLXPieUaRfg9gOl:DRcZ7yr/QuceLz9zCWmXI2P0QKa/ZSj

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.5f65626534da39a0c0ad5cd15a760d90.exe
- Size
  
  885KB
- MD5
  
  5f65626534da39a0c0ad5cd15a760d90
- SHA1
  
  6ab0542a76d0b7ecea8b2ff5f4e76a0a0f8205a3
- SHA256
  
  4464a77c53c1f590094cd04c3d1e750011bfeca4da0331fb06bbd3b8aba3f7da
- SHA512
  
  bc09467a85aae09fe1da841f578d8e404e63eeb8a3dba38f5bb561851c3112da1b89dc55ba6d45a8e6741ad8e3f9a4eed8ca594e7bbc7249d87ee7aea76e22a7
- SSDEEP
  
  12288:DRcljBvw0GKoScY80H80EYypQJTrNjnuLqaMUkV9kZAtq6ajTSLXPieUaRfg9gOl:DRcZ7yr/QuceLz9zCWmXI2P0QKa/ZSj
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2