5a30cd2a705dc24735666377cc62ce64f411d33e588b518762f067a6582883b7 | Triage

Sharing

General

Target

15234bb12760859b1fce93d0da4dfdde
Size

1000KB
Sample

231230-lzgw7sfcg9
MD5

15234bb12760859b1fce93d0da4dfdde
SHA1

3781374f80aa0464313aa63899051eb977d86956
SHA256

5a30cd2a705dc24735666377cc62ce64f411d33e588b518762f067a6582883b7
SHA512

9d0bce77e4ff31f9d0db07e8690325f4111f79908f797e31b1f86ce4c65b8f3c93e1812b7b71b6f4c17257efcd0a904cfb77f65435b5e0b8c53ccfa513d2b55c
SSDEEP

24576:+emX1aWJS0jeA6fT5F/ho+x9KLrmywVzDvgVHYX1B+5vMiqt0gj2ed:+emFaG1rc5qOL

Score

7^/10

Malware Config

Targets

- Target
  
  15234bb12760859b1fce93d0da4dfdde
- Size
  
  1000KB
- MD5
  
  15234bb12760859b1fce93d0da4dfdde
- SHA1
  
  3781374f80aa0464313aa63899051eb977d86956
- SHA256
  
  5a30cd2a705dc24735666377cc62ce64f411d33e588b518762f067a6582883b7
- SHA512
  
  9d0bce77e4ff31f9d0db07e8690325f4111f79908f797e31b1f86ce4c65b8f3c93e1812b7b71b6f4c17257efcd0a904cfb77f65435b5e0b8c53ccfa513d2b55c
- SSDEEP
  
  24576:+emX1aWJS0jeA6fT5F/ho+x9KLrmywVzDvgVHYX1B+5vMiqt0gj2ed:+emFaG1rc5qOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2