bc63e66ce5bf4c411d30fc9f453ad54b5dd1b22ca774bb1c761c03dd36ef3d18 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10d35ff2fa024efdfd7cd5c176c93873
Size

385KB
Sample

231230-gzthsadbe4
MD5

10d35ff2fa024efdfd7cd5c176c93873
SHA1

4df98d9280d9928e8c8585a35c3cc63aaa225d93
SHA256

bc63e66ce5bf4c411d30fc9f453ad54b5dd1b22ca774bb1c761c03dd36ef3d18
SHA512

6f48f2fd8f916249cf347fda1ceefe5bce3f91e2cd9e0fe8d8e4c558cc8628713a2ae9836f1858b076f7ee7346aec2a71b848be0db0b08aa54c1100ced2c108c
SSDEEP

12288:/tvxNlxvjIZSJm9bjGVB59Clki6M0D9zct5rNB:1vjlxvx+bjGLSkl5z+rB

Score

7^/10

Malware Config

Targets

- Target
  
  10d35ff2fa024efdfd7cd5c176c93873
- Size
  
  385KB
- MD5
  
  10d35ff2fa024efdfd7cd5c176c93873
- SHA1
  
  4df98d9280d9928e8c8585a35c3cc63aaa225d93
- SHA256
  
  bc63e66ce5bf4c411d30fc9f453ad54b5dd1b22ca774bb1c761c03dd36ef3d18
- SHA512
  
  6f48f2fd8f916249cf347fda1ceefe5bce3f91e2cd9e0fe8d8e4c558cc8628713a2ae9836f1858b076f7ee7346aec2a71b848be0db0b08aa54c1100ced2c108c
- SSDEEP
  
  12288:/tvxNlxvjIZSJm9bjGVB59Clki6M0D9zct5rNB:1vjlxvx+bjGLSkl5z+rB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2