c18e42007fb6f8721ab55afc690813e964811128f96202328b58d5330a06fc39 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2060ca5fb2999eb76d09bdacc95a5c3a
Size

907KB
Sample

231225-btsreabag2
MD5

2060ca5fb2999eb76d09bdacc95a5c3a
SHA1

d7e02bdee747e6cd8eed372612dbc980fa021f2c
SHA256

c18e42007fb6f8721ab55afc690813e964811128f96202328b58d5330a06fc39
SHA512

3f51b4abf09629b0782709fadf6f9cbba34f28359a1d1f0fc8d1b4676cd586777ab674cff4ce9b996826d9b938def62cda2ff8f3ca2d442b4c01accf71a29208
SSDEEP

12288:4IK01OnkU4IuJSMpavU2N43BcIytcWXcVcRPp/7d0gyIeHkZgkBpuadimjVDa/Z0:4IKs2apavU2N4xytcWsy9qAgE9a/ZS1

Score

7^/10

Malware Config

Targets

- Target
  
  2060ca5fb2999eb76d09bdacc95a5c3a
- Size
  
  907KB
- MD5
  
  2060ca5fb2999eb76d09bdacc95a5c3a
- SHA1
  
  d7e02bdee747e6cd8eed372612dbc980fa021f2c
- SHA256
  
  c18e42007fb6f8721ab55afc690813e964811128f96202328b58d5330a06fc39
- SHA512
  
  3f51b4abf09629b0782709fadf6f9cbba34f28359a1d1f0fc8d1b4676cd586777ab674cff4ce9b996826d9b938def62cda2ff8f3ca2d442b4c01accf71a29208
- SSDEEP
  
  12288:4IK01OnkU4IuJSMpavU2N43BcIytcWXcVcRPp/7d0gyIeHkZgkBpuadimjVDa/Z0:4IKs2apavU2N4xytcWsy9qAgE9a/ZS1
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2