224862a8438b3f6d5b7d37619b7c4b26475b42463411e9ce666b99e6c8f670b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2af5a9b553f0cf3cca876eb5232960b3
Size

241KB
Sample

231225-tckzcabdbn
MD5

2af5a9b553f0cf3cca876eb5232960b3
SHA1

9407655c25da3552eb4e7315b1819b91c7e5c621
SHA256

224862a8438b3f6d5b7d37619b7c4b26475b42463411e9ce666b99e6c8f670b3
SHA512

21166ea023df68e1ed37d56c5a0b62559c9306b76dd4cfb5ebed0fe4defeb45e1b05e5c0885c51dc66065c6e2a9fe2753a4c90c774ac0e97860cc59f8c662512
SSDEEP

6144:w+MMrNE/XMvN0+dbRBBtaGGfkFOwNi+TAmhH9:gZ00mVBBtbGMY2i+EmhH9

Score

7^/10

Malware Config

Targets

- Target
  
  2af5a9b553f0cf3cca876eb5232960b3
- Size
  
  241KB
- MD5
  
  2af5a9b553f0cf3cca876eb5232960b3
- SHA1
  
  9407655c25da3552eb4e7315b1819b91c7e5c621
- SHA256
  
  224862a8438b3f6d5b7d37619b7c4b26475b42463411e9ce666b99e6c8f670b3
- SHA512
  
  21166ea023df68e1ed37d56c5a0b62559c9306b76dd4cfb5ebed0fe4defeb45e1b05e5c0885c51dc66065c6e2a9fe2753a4c90c774ac0e97860cc59f8c662512
- SSDEEP
  
  6144:w+MMrNE/XMvN0+dbRBBtaGGfkFOwNi+TAmhH9:gZ00mVBBtbGMY2i+EmhH9
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2