ec0f1f32294a1e1edc444f2053be661f01545ef6d2fafc26ac9eadc599a9d122 | Triage

Sharing

General

Target

17cd0709ebbf638da495ba5c2fc26c60
Size

4.6MB
Sample

231230-n53f7segf6
MD5

17cd0709ebbf638da495ba5c2fc26c60
SHA1

8aaf01f9fd9ce8d026f8377b618b37db65a872f3
SHA256

ec0f1f32294a1e1edc444f2053be661f01545ef6d2fafc26ac9eadc599a9d122
SHA512

f9a832b913fe1942f8615903c6bbb93430621a8fce5a4a811ac7f33cefd93d9ec4070b35407bb492dfc123f8b3243f9512a86a5ca5d114c138ac9d41437236fc
SSDEEP

49152:BcZQ1xFz4h0wl+LrZpBrjgygRbNsm+kwjK23gygRbS+wWExz0IOIfGwDsLgygRbh:Bcy1xiZYLdpBrAZshuGZjxpPZshuH

Score

7^/10

Malware Config

Targets

- Target
  
  17cd0709ebbf638da495ba5c2fc26c60
- Size
  
  4.6MB
- MD5
  
  17cd0709ebbf638da495ba5c2fc26c60
- SHA1
  
  8aaf01f9fd9ce8d026f8377b618b37db65a872f3
- SHA256
  
  ec0f1f32294a1e1edc444f2053be661f01545ef6d2fafc26ac9eadc599a9d122
- SHA512
  
  f9a832b913fe1942f8615903c6bbb93430621a8fce5a4a811ac7f33cefd93d9ec4070b35407bb492dfc123f8b3243f9512a86a5ca5d114c138ac9d41437236fc
- SSDEEP
  
  49152:BcZQ1xFz4h0wl+LrZpBrjgygRbNsm+kwjK23gygRbS+wWExz0IOIfGwDsLgygRbh:Bcy1xiZYLdpBrAZshuGZjxpPZshuH
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2