d2c458cb23677152bc11beb1ab6ab0de14f86698cf279095008e074249daeae8 | Triage

Sharing

General

Target

TempData71862490209.zip
Size

4.1MB
Sample

231122-sb3mbsdb83
MD5

545562d7448036ef612fe05665943642
SHA1

7d7882b25b92c376de9736a8c0f4f3677b007cc5
SHA256

d2c458cb23677152bc11beb1ab6ab0de14f86698cf279095008e074249daeae8
SHA512

1b088731f3ab18c3c88072066a689603a1fba9d8ac98e77de3d99b83f318581216bc0e6891824c64fec98572f5e2f442f4f28bb83aa874c4fc33bab59af32614
SSDEEP

98304:L9oFZ6vh1jhCPI4bOG2vVOOWQ9kLNriTl9zQ5Ii6KlMvOy4s:LCjkjhCg4bKvgO4NGJ9zm0oMvP

Score

3^/10

Malware Config

Targets

- Target
  
  TempData71862490209/Kingston.QNAP.06636.6530.247.exe
- Size
  
  872KB
- MD5
  
  c56b5f0201a3b3de53e561fe76912bfd
- SHA1
  
  2a4062e10a5de813f5688221dbeb3f3ff33eb417
- SHA256
  
  237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
- SHA512
  
  195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c
- SSDEEP
  
  12288:6pVWeOV7GtINsegA/hMyyzlcqikvAfcN9b2MyZa31twoPTdFxgawV2M01:6T3E53Myyzl0hMf1tr7Caw8M01
Score

3^/10
behavioral1 behavioral2
- Target
  
  TempData71862490209/sqlite3.dll
- Size
  
  910KB
- MD5
  
  def2572ccae7f518bd9d30f37b2fed04
- SHA1
  
  eaec1754a69c50eac99e774b07ef156a1ca6de06
- SHA256
  
  b712286d4d36c74fa32127f848b79cfb857fdc2b1c84bbbee285cf34752443a2
- SHA512
  
  f6183e6b7989cfc342f28074e0c79223765a5995e04e5e1e9d2c6edd12837bf5a825a0800f2941c3c7eedc37258052fd72fd7f1421d88c426666a30b4436aa4a
- SSDEEP
  
  24576:eYFrkZwGN1oSBMMBuNOh7pRUTM+Eex/3Di:eM6MSBlB2Oh7pRUort
Score

3^/10
behavioral3 behavioral4

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4