75cd9abe8fe789f8cf043db0dd8c7f35f547acb0e4b1b14ad03283978549af25 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

218a15de3ef62e6e600ef0cf96847459
Size

506KB
Sample

231231-an2lpafdd6
MD5

218a15de3ef62e6e600ef0cf96847459
SHA1

d896b4d42b89e3238b30473a80e8497cc1b0afe3
SHA256

75cd9abe8fe789f8cf043db0dd8c7f35f547acb0e4b1b14ad03283978549af25
SHA512

b459a2b7af0b0011d073f591a39daadd164882fcc48c093abd75ceeca746fb952b51a41f8032e48068c7a527feb46a5761737d6b70029b5b9edcc36a162f4303
SSDEEP

12288:WhJR74TPSxLAAEMjb+yZjPUXkE9yrTRMa:WvNo4Yq+XXP9y6a

Score

7^/10

Malware Config

Targets

- Target
  
  218a15de3ef62e6e600ef0cf96847459
- Size
  
  506KB
- MD5
  
  218a15de3ef62e6e600ef0cf96847459
- SHA1
  
  d896b4d42b89e3238b30473a80e8497cc1b0afe3
- SHA256
  
  75cd9abe8fe789f8cf043db0dd8c7f35f547acb0e4b1b14ad03283978549af25
- SHA512
  
  b459a2b7af0b0011d073f591a39daadd164882fcc48c093abd75ceeca746fb952b51a41f8032e48068c7a527feb46a5761737d6b70029b5b9edcc36a162f4303
- SSDEEP
  
  12288:WhJR74TPSxLAAEMjb+yZjPUXkE9yrTRMa:WvNo4Yq+XXP9y6a
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2