b8d66ea8a990ea1d0ccf77d62fdfb8148469b0f19081b8132fac09942956a582 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8d66ea8a990ea1d0ccf77d62fdfb8148469b0f19081b8132fac09942956a582
Size

323KB
Sample

231210-2k2k3afeb9
MD5

e7bdd45494ef9dd11f642c728f3a54e5
SHA1

fc57eac77dfd6de209f70e7058396d1208489575
SHA256

b8d66ea8a990ea1d0ccf77d62fdfb8148469b0f19081b8132fac09942956a582
SHA512

fb9b715fedd763eca267889eb63bb88ebcc965cc3d65c11e1a0fb525d3d6debaf89c30f037b6721405e9473a5291101dd6282544a4a3a70c610b663d2e798f95
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

7^/10

Malware Config

Targets

- Target
  
  b8d66ea8a990ea1d0ccf77d62fdfb8148469b0f19081b8132fac09942956a582
- Size
  
  323KB
- MD5
  
  e7bdd45494ef9dd11f642c728f3a54e5
- SHA1
  
  fc57eac77dfd6de209f70e7058396d1208489575
- SHA256
  
  b8d66ea8a990ea1d0ccf77d62fdfb8148469b0f19081b8132fac09942956a582
- SHA512
  
  fb9b715fedd763eca267889eb63bb88ebcc965cc3d65c11e1a0fb525d3d6debaf89c30f037b6721405e9473a5291101dd6282544a4a3a70c610b663d2e798f95
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

7^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2