3be83277a1ce892c0becefb28dad97388bfc82a5f17bb3a3f0cc5d02f6d9be2c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2384123d3a8dd4ffc5f1a817d7ffaff4
Size

1000KB
Sample

231225-q8wtyafec4
MD5

2384123d3a8dd4ffc5f1a817d7ffaff4
SHA1

e1ccc9aa76dc742eb4c39a4191ff4ff2f36a814f
SHA256

3be83277a1ce892c0becefb28dad97388bfc82a5f17bb3a3f0cc5d02f6d9be2c
SHA512

8eca0ea40278d76abd6d3973f02b2dfa0d167a16bc78daa482cffe02b8fa1d87f28f6945d8feb432e9f963413f7781148d0452c20ab0769de8733a4ccd24971b
SSDEEP

12288:InB/epeJAtCSG4BjvmqcjcT+C5ECaBwQ2tb5JLrnylUPqt0gHDS7eyod:GpueAjO1Ic1B+5vMiqt0gj2ed

Score

7^/10

Malware Config

Targets

- Target
  
  2384123d3a8dd4ffc5f1a817d7ffaff4
- Size
  
  1000KB
- MD5
  
  2384123d3a8dd4ffc5f1a817d7ffaff4
- SHA1
  
  e1ccc9aa76dc742eb4c39a4191ff4ff2f36a814f
- SHA256
  
  3be83277a1ce892c0becefb28dad97388bfc82a5f17bb3a3f0cc5d02f6d9be2c
- SHA512
  
  8eca0ea40278d76abd6d3973f02b2dfa0d167a16bc78daa482cffe02b8fa1d87f28f6945d8feb432e9f963413f7781148d0452c20ab0769de8733a4ccd24971b
- SSDEEP
  
  12288:InB/epeJAtCSG4BjvmqcjcT+C5ECaBwQ2tb5JLrnylUPqt0gHDS7eyod:GpueAjO1Ic1B+5vMiqt0gj2ed
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2