29cafbb0ff5de8225af87646e5a491b43cfca0da052270d708c8894ac173fb9a | Triage

Sharing

General

Target

15e697ba6d646e0fbc1f8454012d11d3
Size

506KB
Sample

231230-mhmxkahdek
MD5

15e697ba6d646e0fbc1f8454012d11d3
SHA1

2dec290aa5fd5e5be1d3c71e359646a3d66d239f
SHA256

29cafbb0ff5de8225af87646e5a491b43cfca0da052270d708c8894ac173fb9a
SHA512

648f63bcbdb984f9c3aa2a28f654d0dc3fc702038e2055bf93bbc377de543a045d7065f17eac5097a6cc07c24fafde7e70527a7da2853448b57ef513cc0e1744
SSDEEP

12288:She5PLN10BiljC6VKijb3tD7EMD2qX5+5wag7A2np/4G:Y4PJSB6O63jb3R52qXkng7ryG

Score

7^/10

Malware Config

Targets

- Target
  
  15e697ba6d646e0fbc1f8454012d11d3
- Size
  
  506KB
- MD5
  
  15e697ba6d646e0fbc1f8454012d11d3
- SHA1
  
  2dec290aa5fd5e5be1d3c71e359646a3d66d239f
- SHA256
  
  29cafbb0ff5de8225af87646e5a491b43cfca0da052270d708c8894ac173fb9a
- SHA512
  
  648f63bcbdb984f9c3aa2a28f654d0dc3fc702038e2055bf93bbc377de543a045d7065f17eac5097a6cc07c24fafde7e70527a7da2853448b57ef513cc0e1744
- SSDEEP
  
  12288:She5PLN10BiljC6VKijb3tD7EMD2qX5+5wag7A2np/4G:Y4PJSB6O63jb3R52qXkng7ryG
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2