f1c7eac6834496dd3bedd4cfed7bb23f9d260389c81cd33df92d1d4aebe3b57d | Triage

Sharing

General

Target

01f95ee79478bf8869e6902683b1b222
Size

385KB
Sample

231229-ycb4nagah4
MD5

01f95ee79478bf8869e6902683b1b222
SHA1

20bb98c8a3e03a436404839b2a6aa949d9bc3df0
SHA256

f1c7eac6834496dd3bedd4cfed7bb23f9d260389c81cd33df92d1d4aebe3b57d
SHA512

17787744d171e9ae50ebaed271aff2770d90614d40feeaa49b3175081007994027c30957ceadbc0b52b54c3ec38dfc242eb0047df3b03339ad8cacba2424aaba
SSDEEP

6144:/zhPi5e31VOKtttU31Dq145tR6RVDaL1RW1tcXrIB5CCPx624np+iftnwB:VPWe31Ptm1B96RpSRW7cXY5awimB

Score

7^/10

Malware Config

Targets

- Target
  
  01f95ee79478bf8869e6902683b1b222
- Size
  
  385KB
- MD5
  
  01f95ee79478bf8869e6902683b1b222
- SHA1
  
  20bb98c8a3e03a436404839b2a6aa949d9bc3df0
- SHA256
  
  f1c7eac6834496dd3bedd4cfed7bb23f9d260389c81cd33df92d1d4aebe3b57d
- SHA512
  
  17787744d171e9ae50ebaed271aff2770d90614d40feeaa49b3175081007994027c30957ceadbc0b52b54c3ec38dfc242eb0047df3b03339ad8cacba2424aaba
- SSDEEP
  
  6144:/zhPi5e31VOKtttU31Dq145tR6RVDaL1RW1tcXrIB5CCPx624np+iftnwB:VPWe31Ptm1B96RpSRW7cXY5awimB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2