9072f7ffa54a6ebf3ecd867c36b68778c14e6f8a128726dbfefcc6e2dd5cecff | Triage

Sharing

General

Target

1d672e77a56a79736052bd0b1dbd064f
Size

506KB
Sample

231230-1k6pcaecfk
MD5

1d672e77a56a79736052bd0b1dbd064f
SHA1

e079941e14d4f6c8834fa43cdb112a549250524c
SHA256

9072f7ffa54a6ebf3ecd867c36b68778c14e6f8a128726dbfefcc6e2dd5cecff
SHA512

f26d4c285bb9fa37fcddb575e2d91593df30fdcdbe392a6bc647b5aea827cf08ee627314891bfcd6084c5be2af55e1f319260d3c1a59896fdcfb1a3b32c70506
SSDEEP

12288:LVZHSBxP+hfgbldBg/v/jStQIsGVCiarvXFAlYXkb:LnaxP+hfqwHadVETXFRQ

Score

7^/10

Malware Config

Targets

- Target
  
  1d672e77a56a79736052bd0b1dbd064f
- Size
  
  506KB
- MD5
  
  1d672e77a56a79736052bd0b1dbd064f
- SHA1
  
  e079941e14d4f6c8834fa43cdb112a549250524c
- SHA256
  
  9072f7ffa54a6ebf3ecd867c36b68778c14e6f8a128726dbfefcc6e2dd5cecff
- SHA512
  
  f26d4c285bb9fa37fcddb575e2d91593df30fdcdbe392a6bc647b5aea827cf08ee627314891bfcd6084c5be2af55e1f319260d3c1a59896fdcfb1a3b32c70506
- SSDEEP
  
  12288:LVZHSBxP+hfgbldBg/v/jStQIsGVCiarvXFAlYXkb:LnaxP+hfqwHadVETXFRQ
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2