a3a934bd1b86ee29ccb275e98eb0d14b4478873bb7fe1850dcc825c8bde98db9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0246c0fb4f799d439ab6afcaaa3afd28
Size

1000KB
Sample

231225-drq6xagegr
MD5

0246c0fb4f799d439ab6afcaaa3afd28
SHA1

c612f8dd3f78c0fab0124e37eeb8e5ea1dc30b5f
SHA256

a3a934bd1b86ee29ccb275e98eb0d14b4478873bb7fe1850dcc825c8bde98db9
SHA512

ed295dff4663d0c79b0adc940cfa72e24710629b0337d282508ac3e3c9df78c062501f8154aa9f0c8407d8fb1f7f9d4e7709ead9d903f212695f10fdbb182527
SSDEEP

24576:1dim3nOVXqmsuOO6P7Cf1B+5vMiqt0gj2ed:1dvcXUO/qOL

Score

7^/10

Malware Config

Targets

- Target
  
  0246c0fb4f799d439ab6afcaaa3afd28
- Size
  
  1000KB
- MD5
  
  0246c0fb4f799d439ab6afcaaa3afd28
- SHA1
  
  c612f8dd3f78c0fab0124e37eeb8e5ea1dc30b5f
- SHA256
  
  a3a934bd1b86ee29ccb275e98eb0d14b4478873bb7fe1850dcc825c8bde98db9
- SHA512
  
  ed295dff4663d0c79b0adc940cfa72e24710629b0337d282508ac3e3c9df78c062501f8154aa9f0c8407d8fb1f7f9d4e7709ead9d903f212695f10fdbb182527
- SSDEEP
  
  24576:1dim3nOVXqmsuOO6P7Cf1B+5vMiqt0gj2ed:1dvcXUO/qOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2