2f00a90fdf80f3af73fa568f8f94730283d3463c02de1da72fe389c5cc19bdb3 | Triage

Sharing

General

Target

11f18395c94c8dd263a26047da1d2b6f
Size

385KB
Sample

231230-h4654scbd5
MD5

11f18395c94c8dd263a26047da1d2b6f
SHA1

4e19e8aa9fe6b24fbb0e1d1a100602d3f307b5f9
SHA256

2f00a90fdf80f3af73fa568f8f94730283d3463c02de1da72fe389c5cc19bdb3
SHA512

ce4382eff608e36a7a681618f5d214b762cb45e3f20440efa5e01c5ddf7f307d87c71de9527fa98d50f26fae470f283a8c598fbb0e5f3c5d1edcb1e6032b2fd7
SSDEEP

6144:QIHpRTKm/ysi8FZk8UMkKvWddi0qhVYKUI7lA3DWid35vD16zMB:/HpBDyNR8Ue6s0qhVoZHrkMB

Score

7^/10

Malware Config

Targets

- Target
  
  11f18395c94c8dd263a26047da1d2b6f
- Size
  
  385KB
- MD5
  
  11f18395c94c8dd263a26047da1d2b6f
- SHA1
  
  4e19e8aa9fe6b24fbb0e1d1a100602d3f307b5f9
- SHA256
  
  2f00a90fdf80f3af73fa568f8f94730283d3463c02de1da72fe389c5cc19bdb3
- SHA512
  
  ce4382eff608e36a7a681618f5d214b762cb45e3f20440efa5e01c5ddf7f307d87c71de9527fa98d50f26fae470f283a8c598fbb0e5f3c5d1edcb1e6032b2fd7
- SSDEEP
  
  6144:QIHpRTKm/ysi8FZk8UMkKvWddi0qhVYKUI7lA3DWid35vD16zMB:/HpBDyNR8Ue6s0qhVoZHrkMB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2