1fda9cd974a75084cdb5d6035a5d642e447c818c3fdbeb8061d29c5a6209cd1f | Triage

Sharing

General

Target

fab176f621746293a70e086378763bd6
Size

241KB
Sample

231228-1qywpaede5
MD5

fab176f621746293a70e086378763bd6
SHA1

1617abaf9c7ee5b0e073ebedb10e27ec06891ade
SHA256

1fda9cd974a75084cdb5d6035a5d642e447c818c3fdbeb8061d29c5a6209cd1f
SHA512

362d5c87bcfc4b09e37eab31a8af9d5172f580676ac5868a62b2943766ca804fa326ee83547a9a6b3525f398660fb047257ebc30b374c3925cc110655f558a53
SSDEEP

6144:1iYjjkKBp4T/tpZZMmhtav1pv9KVZD8jR8pxj:1iYjxBp4L3v2vBKTXxj

Score

7^/10

Malware Config

Targets

- Target
  
  fab176f621746293a70e086378763bd6
- Size
  
  241KB
- MD5
  
  fab176f621746293a70e086378763bd6
- SHA1
  
  1617abaf9c7ee5b0e073ebedb10e27ec06891ade
- SHA256
  
  1fda9cd974a75084cdb5d6035a5d642e447c818c3fdbeb8061d29c5a6209cd1f
- SHA512
  
  362d5c87bcfc4b09e37eab31a8af9d5172f580676ac5868a62b2943766ca804fa326ee83547a9a6b3525f398660fb047257ebc30b374c3925cc110655f558a53
- SSDEEP
  
  6144:1iYjjkKBp4T/tpZZMmhtav1pv9KVZD8jR8pxj:1iYjxBp4L3v2vBKTXxj
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2