60b5ed542d573723ef3191aa2f157eef1a031d2a53e2609bc6d96e99dcd14f32 | Triage

Sharing

General

Target

4a3a9b54a5895aeaa117252ae2a3df21
Size

506KB
Sample

231226-b5t4lscfdn
MD5

4a3a9b54a5895aeaa117252ae2a3df21
SHA1

5dd8146f333be7c65c8cc2fb2dbcc4a802f52dea
SHA256

60b5ed542d573723ef3191aa2f157eef1a031d2a53e2609bc6d96e99dcd14f32
SHA512

2bcc89341d85cd1f9626d108509253fbc5622979c538a58b45370311ad45da475c8009d1e042860be7895bcb6c6aa4ab2c066b000254adae6ba1eb2914821405
SSDEEP

6144:XsB43ExsIxAEe9wY+z2l865hJ7VqQk7aNZVKSX4ugE87/WEvgocuPT1+gcaaOE62:XVGYd+/65UQBZet7/Tvgoyd

Score

7^/10

Malware Config

Targets

- Target
  
  4a3a9b54a5895aeaa117252ae2a3df21
- Size
  
  506KB
- MD5
  
  4a3a9b54a5895aeaa117252ae2a3df21
- SHA1
  
  5dd8146f333be7c65c8cc2fb2dbcc4a802f52dea
- SHA256
  
  60b5ed542d573723ef3191aa2f157eef1a031d2a53e2609bc6d96e99dcd14f32
- SHA512
  
  2bcc89341d85cd1f9626d108509253fbc5622979c538a58b45370311ad45da475c8009d1e042860be7895bcb6c6aa4ab2c066b000254adae6ba1eb2914821405
- SSDEEP
  
  6144:XsB43ExsIxAEe9wY+z2l865hJ7VqQk7aNZVKSX4ugE87/WEvgocuPT1+gcaaOE62:XVGYd+/65UQBZet7/Tvgoyd
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2