5c428c1b8da9e185e5d47eaead448aa9f57e3cb101200d39bfc7efca333b7cd1 | Triage

Sharing

General

Target

2a1f5e7a784154d85ef16004431c8ce3
Size

1000KB
Sample

231231-f8dcgsged2
MD5

2a1f5e7a784154d85ef16004431c8ce3
SHA1

51de579a2f1ffcacb130180af1ebb5d91d075970
SHA256

5c428c1b8da9e185e5d47eaead448aa9f57e3cb101200d39bfc7efca333b7cd1
SHA512

021fdeac31d7f90ff07d9dc0cab749d2eb61baa560d636113d268af55c3a3e9ee2d0341a305073eb39d04fed99dc8ade059a51950309a936a15aa83f64694c3b
SSDEEP

24576:fku9XmKvOUAHBWlB98QMY1B+5vMiqt0gj2ed:fZiBcBSQLqOL

Score

7^/10

Malware Config

Targets

- Target
  
  2a1f5e7a784154d85ef16004431c8ce3
- Size
  
  1000KB
- MD5
  
  2a1f5e7a784154d85ef16004431c8ce3
- SHA1
  
  51de579a2f1ffcacb130180af1ebb5d91d075970
- SHA256
  
  5c428c1b8da9e185e5d47eaead448aa9f57e3cb101200d39bfc7efca333b7cd1
- SHA512
  
  021fdeac31d7f90ff07d9dc0cab749d2eb61baa560d636113d268af55c3a3e9ee2d0341a305073eb39d04fed99dc8ade059a51950309a936a15aa83f64694c3b
- SSDEEP
  
  24576:fku9XmKvOUAHBWlB98QMY1B+5vMiqt0gj2ed:fZiBcBSQLqOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2