802746ebdc679ec23e0e5f8f60ae0590fb90da7e80a5add319a30130fab5a0f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eaf0b886df577c2c4a4e658b77693ed6bf0afdad4fd05a1fbcfdb88d81d10de3.zip
Size

652KB
Sample

231119-3gzsqscf27
MD5

0bf83ef5e475928665914dab13aeb069
SHA1

a1513775d3f1691d7cb1a4a3eea20dbabcc762a7
SHA256

802746ebdc679ec23e0e5f8f60ae0590fb90da7e80a5add319a30130fab5a0f1
SHA512

77127c6a4139a28a2957963a38e0d18a60c95f52d0e3813add294f28a02f588d62d335f8c448e33fe7aeb8f88cbe00df55bd0c94487e498238a950e5381083bd
SSDEEP

12288:ZtojfYmO3jaJk6WDsgAykkCAsTVIdJvSrjr6l/eCsBcmalx6kip1fG:2zJk1sgYpVBmJ6D696aOB1u

Score

7^/10

Malware Config

Targets

- Target
  
  eaf0b886df577c2c4a4e658b77693ed6bf0afdad4fd05a1fbcfdb88d81d10de3.exe
- Size
  
  733KB
- MD5
  
  bcf863eaa53ffbe804fc5e6bcfe2b424
- SHA1
  
  e269c72b732a9ba59730e21dfa774bd64be4567d
- SHA256
  
  eaf0b886df577c2c4a4e658b77693ed6bf0afdad4fd05a1fbcfdb88d81d10de3
- SHA512
  
  34420d896b329281237410bc2fe38d90a36df3f483798a6cf36d04681ef7b4399c4378d8ad215df8bf684f09f964029b2ea1fd7d615011fed2187a6d780683aa
- SSDEEP
  
  12288:TtelauPWgC8b4+VYlPTIGll7vXWPtNWYNqNcy+fI0V8xY9tZv0u/TrWo8vMSPQhI:OWV8b4e0IGlFG2LNcyF0V8Ec
Score

7^/10
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2