618ba8c2ad3706d86aa540df97bb5be4bfc242cce98d841e65e7d0657b40a2d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28d81a6624393c0519fcac121518a48c
Size

1000KB
Sample

231231-ff8b6ahch3
MD5

28d81a6624393c0519fcac121518a48c
SHA1

ef1e14c5eac943a639ea17d8904b4d45ae65af54
SHA256

618ba8c2ad3706d86aa540df97bb5be4bfc242cce98d841e65e7d0657b40a2d9
SHA512

0a0c1bb3ff450b9e1a878c336c6b60d60c8d924c8ae0e5953487e875c3ab5f9c94c2519d340f36b4b3882739346ce9bb1707c968f228fe1060e98b4a5927ff32
SSDEEP

24576:ek5bUXl5i3u0GjHDNiX1B+5vMiqt0gj2ed:P6qe3jHDwnqOL

Score

7^/10

Malware Config

Targets

- Target
  
  28d81a6624393c0519fcac121518a48c
- Size
  
  1000KB
- MD5
  
  28d81a6624393c0519fcac121518a48c
- SHA1
  
  ef1e14c5eac943a639ea17d8904b4d45ae65af54
- SHA256
  
  618ba8c2ad3706d86aa540df97bb5be4bfc242cce98d841e65e7d0657b40a2d9
- SHA512
  
  0a0c1bb3ff450b9e1a878c336c6b60d60c8d924c8ae0e5953487e875c3ab5f9c94c2519d340f36b4b3882739346ce9bb1707c968f228fe1060e98b4a5927ff32
- SSDEEP
  
  24576:ek5bUXl5i3u0GjHDNiX1B+5vMiqt0gj2ed:P6qe3jHDwnqOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2