8ad031299ba7cb54d296ddee08362a368b8e64f2db632b15cbd079c8533415c2 | Triage

Sharing

General

Target

1690d2a987c025f2f2fa1c12e78d60f1
Size

385KB
Sample

231230-m2tt8afeg4
MD5

1690d2a987c025f2f2fa1c12e78d60f1
SHA1

e746c40ddc2ddd8f5bfe2ef583baa567be19e927
SHA256

8ad031299ba7cb54d296ddee08362a368b8e64f2db632b15cbd079c8533415c2
SHA512

ecea2d31f479d19f6080dacc3fa42bcfaa10ea3afcb89e46c05cdfb139cff950ee52b0fa2015ac17a85212d609aafb46f3906343be6d774f1da457c27a88686f
SSDEEP

6144:FdhoWilhnEZQeQIvGucoodG69iyUV3YKuaWrGJKy/4hNW9GL7B:FdyljghodzoHVW5rtyghNW+7B

Score

7^/10

Malware Config

Targets

- Target
  
  1690d2a987c025f2f2fa1c12e78d60f1
- Size
  
  385KB
- MD5
  
  1690d2a987c025f2f2fa1c12e78d60f1
- SHA1
  
  e746c40ddc2ddd8f5bfe2ef583baa567be19e927
- SHA256
  
  8ad031299ba7cb54d296ddee08362a368b8e64f2db632b15cbd079c8533415c2
- SHA512
  
  ecea2d31f479d19f6080dacc3fa42bcfaa10ea3afcb89e46c05cdfb139cff950ee52b0fa2015ac17a85212d609aafb46f3906343be6d774f1da457c27a88686f
- SSDEEP
  
  6144:FdhoWilhnEZQeQIvGucoodG69iyUV3YKuaWrGJKy/4hNW9GL7B:FdyljghodzoHVW5rtyghNW+7B
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2