39936113cc975d66ed3eb5c92062bda5c2606b1dc818f34563f338849f50b01e | Triage

Sharing

General

Target

f80ce67806d08c319fae28be54f1d1d4
Size

385KB
Sample

231228-zwc1qsaaf5
MD5

f80ce67806d08c319fae28be54f1d1d4
SHA1

91fe8f1baed08f887b82c3f9b8d803f73808eff8
SHA256

39936113cc975d66ed3eb5c92062bda5c2606b1dc818f34563f338849f50b01e
SHA512

28349be3c9145c6c66540afedb40388d2ca30c937150be21f230d4ddc119a486e5bc6f174c29c47ce8f8ea93152d7e4ce6c6f0bb9c2c0f2ff70d4e9d96b594df
SSDEEP

12288:U7BPOm2hMiFYfJ2bPK+sXXnuAj6XTFfUB:a21WRaP6HuA8TFsB

Score

7^/10

Malware Config

Targets

- Target
  
  f80ce67806d08c319fae28be54f1d1d4
- Size
  
  385KB
- MD5
  
  f80ce67806d08c319fae28be54f1d1d4
- SHA1
  
  91fe8f1baed08f887b82c3f9b8d803f73808eff8
- SHA256
  
  39936113cc975d66ed3eb5c92062bda5c2606b1dc818f34563f338849f50b01e
- SHA512
  
  28349be3c9145c6c66540afedb40388d2ca30c937150be21f230d4ddc119a486e5bc6f174c29c47ce8f8ea93152d7e4ce6c6f0bb9c2c0f2ff70d4e9d96b594df
- SSDEEP
  
  12288:U7BPOm2hMiFYfJ2bPK+sXXnuAj6XTFfUB:a21WRaP6HuA8TFsB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2