9134235995368b30227705906f09e0d0bfadf35c34172da90ae3120514064422 | Triage

Sharing

General

Target

14f60d49135f04b7989249dc5cd98264
Size

1000KB
Sample

231230-lvgqmsedb5
MD5

14f60d49135f04b7989249dc5cd98264
SHA1

e99e787fe7e282c511e7e9b68e2c428f6edd44ee
SHA256

9134235995368b30227705906f09e0d0bfadf35c34172da90ae3120514064422
SHA512

211b2fda036a0eb7d64b3d945765e9d91aa7a5b003dc8753099b5b00589ada4e23cdb5157a8abacd5adca33c5f26a4e7768a02259ef45beeefee7a1b7263eac0
SSDEEP

24576:CneqADSF5mINWcGBJQR4e1B+5vMiqt0gj2ed:CnYOFTNWctqOL

Score

7^/10

Malware Config

Targets

- Target
  
  14f60d49135f04b7989249dc5cd98264
- Size
  
  1000KB
- MD5
  
  14f60d49135f04b7989249dc5cd98264
- SHA1
  
  e99e787fe7e282c511e7e9b68e2c428f6edd44ee
- SHA256
  
  9134235995368b30227705906f09e0d0bfadf35c34172da90ae3120514064422
- SHA512
  
  211b2fda036a0eb7d64b3d945765e9d91aa7a5b003dc8753099b5b00589ada4e23cdb5157a8abacd5adca33c5f26a4e7768a02259ef45beeefee7a1b7263eac0
- SSDEEP
  
  24576:CneqADSF5mINWcGBJQR4e1B+5vMiqt0gj2ed:CnYOFTNWctqOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2