a96fa5162fa522ccbda875233dc08498a516e01f2aa31bc08b6270684bc6e468 | Triage

Sharing

General

Target

1ff2025cdd4680e904f3dd73b30c471c
Size

506KB
Sample

231225-bpenzsghep
MD5

1ff2025cdd4680e904f3dd73b30c471c
SHA1

92cb5d301a11feeeaa17e70f47f88073b3f48475
SHA256

a96fa5162fa522ccbda875233dc08498a516e01f2aa31bc08b6270684bc6e468
SHA512

cba1dcf0971d0ca8e2cb5cb9055ce760ff7a68c77765c0bd59d424484ef5408f986d34a6f64c6b65f023369ad7a4a857250e08348e7c2007eb08239d3ad21d0b
SSDEEP

12288:lRuLZS6UdmXIiiE8ZRQQkgQICbhoWDaV+YqWnTMxyFo4:uEd9iiEzQA3baaaVXNo4

Score

7^/10

Malware Config

Targets

- Target
  
  1ff2025cdd4680e904f3dd73b30c471c
- Size
  
  506KB
- MD5
  
  1ff2025cdd4680e904f3dd73b30c471c
- SHA1
  
  92cb5d301a11feeeaa17e70f47f88073b3f48475
- SHA256
  
  a96fa5162fa522ccbda875233dc08498a516e01f2aa31bc08b6270684bc6e468
- SHA512
  
  cba1dcf0971d0ca8e2cb5cb9055ce760ff7a68c77765c0bd59d424484ef5408f986d34a6f64c6b65f023369ad7a4a857250e08348e7c2007eb08239d3ad21d0b
- SSDEEP
  
  12288:lRuLZS6UdmXIiiE8ZRQQkgQICbhoWDaV+YqWnTMxyFo4:uEd9iiEzQA3baaaVXNo4
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2