02afea81ad504b649e0b274b05320fbbc732c7773576e74c1fe6bd01833a6614 | Triage

Sharing

General

Target

18e94fe014d382412f1e3421be3b94b3
Size

385KB
Sample

231230-pytq6adba6
MD5

18e94fe014d382412f1e3421be3b94b3
SHA1

b1812972039f76cda94f4a8b68b7ba06b5e302b3
SHA256

02afea81ad504b649e0b274b05320fbbc732c7773576e74c1fe6bd01833a6614
SHA512

f951ea07343e8fb93ddb9feeb40abd841827ed9644430fb56a7850c1a6e3f607c2d574728e101c5179319ccafac1c1223054484bdb8460ac5337c765a52b717a
SSDEEP

6144:WbrisaMPElTIJGEe6q9xJEpI22fvYLy7FZmn6bveEx0yFy5URyEBSB:4im8l8Ne62xJyIJfnSQ0Uy5UiB

Score

7^/10

Malware Config

Targets

- Target
  
  18e94fe014d382412f1e3421be3b94b3
- Size
  
  385KB
- MD5
  
  18e94fe014d382412f1e3421be3b94b3
- SHA1
  
  b1812972039f76cda94f4a8b68b7ba06b5e302b3
- SHA256
  
  02afea81ad504b649e0b274b05320fbbc732c7773576e74c1fe6bd01833a6614
- SHA512
  
  f951ea07343e8fb93ddb9feeb40abd841827ed9644430fb56a7850c1a6e3f607c2d574728e101c5179319ccafac1c1223054484bdb8460ac5337c765a52b717a
- SSDEEP
  
  6144:WbrisaMPElTIJGEe6q9xJEpI22fvYLy7FZmn6bveEx0yFy5URyEBSB:4im8l8Ne62xJyIJfnSQ0Uy5UiB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2