92f005a99c8644770992a038614f2bafce98f53db7492475ea8b649463b1befe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

583e25a96cfa78c688f18ba439f69c9d
Size

241KB
Sample

231226-gnjt7sdhe3
MD5

583e25a96cfa78c688f18ba439f69c9d
SHA1

d4c16f7143445e525db325538ee91080c05abb58
SHA256

92f005a99c8644770992a038614f2bafce98f53db7492475ea8b649463b1befe
SHA512

0889abceeb839155cd0b3f2313c1ec620060b51bcd4a15f956855ca1debd4ba163ae7b44f5ef20c3b0f298093257ad8e715642366a6d384112699ba13346d144
SSDEEP

6144:QBnCifvMLY8QHhjBGsyAdS1mOGxTR8L1fYXvQ1G+1BY3JaDj9+FpJ9b/+ZiqAh0r:QAifvGY8QHVE3AqmTZaLtYI1JnXUFpr6

Score

7^/10

Malware Config

Targets

- Target
  
  583e25a96cfa78c688f18ba439f69c9d
- Size
  
  241KB
- MD5
  
  583e25a96cfa78c688f18ba439f69c9d
- SHA1
  
  d4c16f7143445e525db325538ee91080c05abb58
- SHA256
  
  92f005a99c8644770992a038614f2bafce98f53db7492475ea8b649463b1befe
- SHA512
  
  0889abceeb839155cd0b3f2313c1ec620060b51bcd4a15f956855ca1debd4ba163ae7b44f5ef20c3b0f298093257ad8e715642366a6d384112699ba13346d144
- SSDEEP
  
  6144:QBnCifvMLY8QHhjBGsyAdS1mOGxTR8L1fYXvQ1G+1BY3JaDj9+FpJ9b/+ZiqAh0r:QAifvGY8QHVE3AqmTZaLtYI1JnXUFpr6
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2