5d2f0aba20b75e220505178e5c6325ef8be192ec62fba00519820fbb0bc4f6eb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e21318d98318df1ae7685fa11139305
Size

385KB
Sample

231230-15ndhaadcr
MD5

1e21318d98318df1ae7685fa11139305
SHA1

f39bdc16c1646fd48275795edffda458f7478fb1
SHA256

5d2f0aba20b75e220505178e5c6325ef8be192ec62fba00519820fbb0bc4f6eb
SHA512

74f5da23a31d25b79678a1c78eb383347b468841c0c9286c8dc2f268a2a30fb61e2ea79db19cee34d374678275674f5e9728be1ce3e06c14f8ee5a4ffa9ee2bd
SSDEEP

6144:/zhPi5W31VOKtttU31Dq145tR6RVDaL1RW1tcXrIB5CCPx624np+iftnwB:VPWW31Ptm1B96RpSRW7cXY5awimB

Score

7^/10

Malware Config

Targets

- Target
  
  1e21318d98318df1ae7685fa11139305
- Size
  
  385KB
- MD5
  
  1e21318d98318df1ae7685fa11139305
- SHA1
  
  f39bdc16c1646fd48275795edffda458f7478fb1
- SHA256
  
  5d2f0aba20b75e220505178e5c6325ef8be192ec62fba00519820fbb0bc4f6eb
- SHA512
  
  74f5da23a31d25b79678a1c78eb383347b468841c0c9286c8dc2f268a2a30fb61e2ea79db19cee34d374678275674f5e9728be1ce3e06c14f8ee5a4ffa9ee2bd
- SSDEEP
  
  6144:/zhPi5W31VOKtttU31Dq145tR6RVDaL1RW1tcXrIB5CCPx624np+iftnwB:VPWW31Ptm1B96RpSRW7cXY5awimB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2