70f3eb4e628006ce78ab43cd5bb92434d403aea5e26645e435618f5317679b59 | Triage

Sharing

General

Target

2d576b0988234b63764b850e5015075d
Size

2.0MB
Sample

231231-h9w74aaah5
MD5

2d576b0988234b63764b850e5015075d
SHA1

e61f1f1df0a841349d159c7ec97b818b6d91393a
SHA256

70f3eb4e628006ce78ab43cd5bb92434d403aea5e26645e435618f5317679b59
SHA512

51f5e8db48e132c32b744670aae6d7cb6f1f4f2730abbd78db15102e8098a4aefd2621481fe6b23c345be8d2a82243b90fd97819667dd86db5088f3df2bbb521
SSDEEP

24576:mhR1G/RcMquyep4t/Yceaq1B+5vMiqt0gj2e6lgir/IsDXqqa433mT6z1B+5vMii:mhRgZTKlMqOMlg2/HjC433JqO7

Score

7^/10

Malware Config

Targets

- Target
  
  2d576b0988234b63764b850e5015075d
- Size
  
  2.0MB
- MD5
  
  2d576b0988234b63764b850e5015075d
- SHA1
  
  e61f1f1df0a841349d159c7ec97b818b6d91393a
- SHA256
  
  70f3eb4e628006ce78ab43cd5bb92434d403aea5e26645e435618f5317679b59
- SHA512
  
  51f5e8db48e132c32b744670aae6d7cb6f1f4f2730abbd78db15102e8098a4aefd2621481fe6b23c345be8d2a82243b90fd97819667dd86db5088f3df2bbb521
- SSDEEP
  
  24576:mhR1G/RcMquyep4t/Yceaq1B+5vMiqt0gj2e6lgir/IsDXqqa433mT6z1B+5vMii:mhRgZTKlMqOMlg2/HjC433JqO7
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2