3e88aa6bb37a439378cc9979bf924825fe00442137af183f7e6a445fae597cfd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

052aed5b047b14e6f258c446869c3965
Size

385KB
Sample

231229-11gp6aaggp
MD5

052aed5b047b14e6f258c446869c3965
SHA1

5024463c3d8af4ee23dc3192a2deb14249f49d49
SHA256

3e88aa6bb37a439378cc9979bf924825fe00442137af183f7e6a445fae597cfd
SHA512

c4a2136bff50234b165bd1222020ca1228dde245bc710c90da57c6142631002527d0f3ad1afa9537571c5a6a7a0c03b8dc319d6b8e56ebea6006c05b13e1206a
SSDEEP

12288:nIaRo+IcxLISUVcviJIS/AO7AYCwtriCB:5RoQxUSsMk17RrxiCB

Score

7^/10

Malware Config

Targets

- Target
  
  052aed5b047b14e6f258c446869c3965
- Size
  
  385KB
- MD5
  
  052aed5b047b14e6f258c446869c3965
- SHA1
  
  5024463c3d8af4ee23dc3192a2deb14249f49d49
- SHA256
  
  3e88aa6bb37a439378cc9979bf924825fe00442137af183f7e6a445fae597cfd
- SHA512
  
  c4a2136bff50234b165bd1222020ca1228dde245bc710c90da57c6142631002527d0f3ad1afa9537571c5a6a7a0c03b8dc319d6b8e56ebea6006c05b13e1206a
- SSDEEP
  
  12288:nIaRo+IcxLISUVcviJIS/AO7AYCwtriCB:5RoQxUSsMk17RrxiCB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2