a4a4ff3d45d205d66d0ef40f33d48b20b218a46bde428c283305bd2425e2fa61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

192b0b767de3ec0ba8604f2a41eb18cd
Size

506KB
Sample

231230-p5t1haefa2
MD5

192b0b767de3ec0ba8604f2a41eb18cd
SHA1

4f448f0f01abefc26608f972fcbddc5df144c734
SHA256

a4a4ff3d45d205d66d0ef40f33d48b20b218a46bde428c283305bd2425e2fa61
SHA512

e1aaf5499d78679037e7f13e718fe04bfe126236d6a039838320ff2b99e0a777dafa8ab77b63ea7c74cd55884bd44bebc75afdd8af05fec94b2ff4bddc63cdd7
SSDEEP

12288:ysW4OXxvDQvZQoODeW70GkQbuFUTzp4WD/u+3/46ufaUYP:ysXDXekbUTzuG46pd

Score

7^/10

Malware Config

Targets

- Target
  
  192b0b767de3ec0ba8604f2a41eb18cd
- Size
  
  506KB
- MD5
  
  192b0b767de3ec0ba8604f2a41eb18cd
- SHA1
  
  4f448f0f01abefc26608f972fcbddc5df144c734
- SHA256
  
  a4a4ff3d45d205d66d0ef40f33d48b20b218a46bde428c283305bd2425e2fa61
- SHA512
  
  e1aaf5499d78679037e7f13e718fe04bfe126236d6a039838320ff2b99e0a777dafa8ab77b63ea7c74cd55884bd44bebc75afdd8af05fec94b2ff4bddc63cdd7
- SSDEEP
  
  12288:ysW4OXxvDQvZQoODeW70GkQbuFUTzp4WD/u+3/46ufaUYP:ysXDXekbUTzuG46pd
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2