ducktail | 292fcfd858695f995f78877bac272962fb19ae1ce1e7b4b90882320ba2b23aa9 | Triage

Sharing

General

Target

292fcfd858695f995f78877bac272962fb19ae1ce1e7b4b90882320ba2b23aa9
Size

133.0MB
Sample

231219-bnxs6sgab3
MD5

002d8d7d2c919911f99b334bb61c6ba5
SHA1

256a1923bbfced228075f512b61ee51b8d057c8f
SHA256

292fcfd858695f995f78877bac272962fb19ae1ce1e7b4b90882320ba2b23aa9
SHA512

79e9d4aed2c7326668bedc5ff4c8531cb82a3f1479312d9efb2541bce1adc65c4398754363ca3f8decf54398325273bc456b381d5fc8f53cd5a156a6aed27b49
SSDEEP

786432:VWXgFvYWzNQXBVBEEIVeHDWIBV0aMoSctbw17p2NsBHae7XRYBix72TtLwSTRpfx:VWavYvKeh0ew19S8ae7XRuiRAhd

Score

10^/10

ducktail

Malware Config

Targets

- Target
  
  292fcfd858695f995f78877bac272962fb19ae1ce1e7b4b90882320ba2b23aa9
- Size
  
  133.0MB
- MD5
  
  002d8d7d2c919911f99b334bb61c6ba5
- SHA1
  
  256a1923bbfced228075f512b61ee51b8d057c8f
- SHA256
  
  292fcfd858695f995f78877bac272962fb19ae1ce1e7b4b90882320ba2b23aa9
- SHA512
  
  79e9d4aed2c7326668bedc5ff4c8531cb82a3f1479312d9efb2541bce1adc65c4398754363ca3f8decf54398325273bc456b381d5fc8f53cd5a156a6aed27b49
- SSDEEP
  
  786432:VWXgFvYWzNQXBVBEEIVeHDWIBV0aMoSctbw17p2NsBHae7XRYBix72TtLwSTRpfx:VWavYvKeh0ew19S8ae7XRuiRAhd
Score

6^/10
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2