446f8fbb5c77eb5a91febd12c24950dc3a716bdcc6f45cacf0ae20aff10b4290 | Triage

Sharing

General

Target

19060305458433df294f69a2c1dd38a1
Size

506KB
Sample

231230-p2fzgadga6
MD5

19060305458433df294f69a2c1dd38a1
SHA1

554aab9484eb309dfaf61da2ca60a2ce149deb55
SHA256

446f8fbb5c77eb5a91febd12c24950dc3a716bdcc6f45cacf0ae20aff10b4290
SHA512

cf414ae1476bb0f7f1f378bc5e5cb9eaec10ead79e44ab992bef3cace4b1c43ae82b1b112d431791a1de5c1161dd2085581a7a87a3468ab9d247fe3bbee10964
SSDEEP

12288:l4s/H8un1JEGnuKxPOeNgEOy0l+45MXMuENrhXNQcFrSU:lTH83GnXOeGEE+1uh99FrSU

Score

7^/10

Malware Config

Targets

- Target
  
  19060305458433df294f69a2c1dd38a1
- Size
  
  506KB
- MD5
  
  19060305458433df294f69a2c1dd38a1
- SHA1
  
  554aab9484eb309dfaf61da2ca60a2ce149deb55
- SHA256
  
  446f8fbb5c77eb5a91febd12c24950dc3a716bdcc6f45cacf0ae20aff10b4290
- SHA512
  
  cf414ae1476bb0f7f1f378bc5e5cb9eaec10ead79e44ab992bef3cace4b1c43ae82b1b112d431791a1de5c1161dd2085581a7a87a3468ab9d247fe3bbee10964
- SSDEEP
  
  12288:l4s/H8un1JEGnuKxPOeNgEOy0l+45MXMuENrhXNQcFrSU:lTH83GnXOeGEE+1uh99FrSU
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2