97344c8dfd34fff4f69a729e8b07d361bf51e23c83218485b995d59efdd5bd59 | Triage

Sharing

General

Target

97344c8dfd34fff4f69a729e8b07d361bf51e23c83218485b995d59efdd5bd59
Size

1010KB
Sample

231114-xlsx4ade78
MD5

da2b5b57f872b6a5ae830bd2b11ba1c0
SHA1

76db8ed5a1e5ce83f551639e4b06c324f80a243f
SHA256

97344c8dfd34fff4f69a729e8b07d361bf51e23c83218485b995d59efdd5bd59
SHA512

ae97dbf096bd90a92bd419f61345bcaef04699b39d10af80f17a639cf280174d21a20293c44a6c37666ebdbf5c6ea09618a51343b1bb6cc39b6fac7dcaab8d3a
SSDEEP

12288:0a0r6ZDd+c5CPGXAqQJyP1teGPoxIvOA6YONEeKTSyxMtclcAYjInmeVEUkkP/B:BDd2Jy/eGQx6OdYOWPOuMJjeyUkkXB

Score

7^/10

Malware Config

Targets

- Target
  
  97344c8dfd34fff4f69a729e8b07d361bf51e23c83218485b995d59efdd5bd59
- Size
  
  1010KB
- MD5
  
  da2b5b57f872b6a5ae830bd2b11ba1c0
- SHA1
  
  76db8ed5a1e5ce83f551639e4b06c324f80a243f
- SHA256
  
  97344c8dfd34fff4f69a729e8b07d361bf51e23c83218485b995d59efdd5bd59
- SHA512
  
  ae97dbf096bd90a92bd419f61345bcaef04699b39d10af80f17a639cf280174d21a20293c44a6c37666ebdbf5c6ea09618a51343b1bb6cc39b6fac7dcaab8d3a
- SSDEEP
  
  12288:0a0r6ZDd+c5CPGXAqQJyP1teGPoxIvOA6YONEeKTSyxMtclcAYjInmeVEUkkP/B:BDd2Jy/eGQx6OdYOWPOuMJjeyUkkXB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2