797b23a2a291ae92f09654f16af98258232115834075df7c7914ca35ea124aa3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2acae01af62c3bca5ec444f87b8a3246
Size

385KB
Sample

231231-glz4eacba5
MD5

2acae01af62c3bca5ec444f87b8a3246
SHA1

79d1f91b0a49cd88cae2b217d7f0c82c66465a97
SHA256

797b23a2a291ae92f09654f16af98258232115834075df7c7914ca35ea124aa3
SHA512

17817275a66928c8a0cfea07da717dea654b9bd035dce19afe36f48153b5a04dd5dcdf2d10e230f2da59e84491bee22e983a8d55e477a8abba6e50c7ea229b38
SSDEEP

6144:tR3YlqwRRDiH2UpsB1708Ao29XgYWvnAzOlZG3jY7k7WkL0dmOZHRQumYsLloDmB:b3YMw/s2P08721VWvnZRoruWLrB

Score

7^/10

Malware Config

Targets

- Target
  
  2acae01af62c3bca5ec444f87b8a3246
- Size
  
  385KB
- MD5
  
  2acae01af62c3bca5ec444f87b8a3246
- SHA1
  
  79d1f91b0a49cd88cae2b217d7f0c82c66465a97
- SHA256
  
  797b23a2a291ae92f09654f16af98258232115834075df7c7914ca35ea124aa3
- SHA512
  
  17817275a66928c8a0cfea07da717dea654b9bd035dce19afe36f48153b5a04dd5dcdf2d10e230f2da59e84491bee22e983a8d55e477a8abba6e50c7ea229b38
- SSDEEP
  
  6144:tR3YlqwRRDiH2UpsB1708Ao29XgYWvnAzOlZG3jY7k7WkL0dmOZHRQumYsLloDmB:b3YMw/s2P08721VWvnZRoruWLrB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2