5a23d22ff9366416f2ac1cd447e1f835252578a36c7c460b0e6f690a2327a3a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c3a9d9eac265a031ad0ef8cd251713d
Size

418KB
Sample

231231-hlqemscaf9
MD5

2c3a9d9eac265a031ad0ef8cd251713d
SHA1

33a977f3ebaa0557484c6e8d73850d2885983f65
SHA256

5a23d22ff9366416f2ac1cd447e1f835252578a36c7c460b0e6f690a2327a3a0
SHA512

ef95a6edddd1ff301d6dd1623ddb841dbc4bb060256498d214025a4f5b512f35628ea1645cf8b2b17dc39e04182f8fd29e68b33154490c5e11b53f4e07d0f304
SSDEEP

12288:UJ1BIyL8J/vvFVtcOOc3G/NdWxCS3G4EnaT9jgiy:ULk/ZSWxCS24EnaTJg

Score

7^/10

Malware Config

Targets

- Target
  
  2c3a9d9eac265a031ad0ef8cd251713d
- Size
  
  418KB
- MD5
  
  2c3a9d9eac265a031ad0ef8cd251713d
- SHA1
  
  33a977f3ebaa0557484c6e8d73850d2885983f65
- SHA256
  
  5a23d22ff9366416f2ac1cd447e1f835252578a36c7c460b0e6f690a2327a3a0
- SHA512
  
  ef95a6edddd1ff301d6dd1623ddb841dbc4bb060256498d214025a4f5b512f35628ea1645cf8b2b17dc39e04182f8fd29e68b33154490c5e11b53f4e07d0f304
- SSDEEP
  
  12288:UJ1BIyL8J/vvFVtcOOc3G/NdWxCS3G4EnaT9jgiy:ULk/ZSWxCS24EnaTJg
Score

7^/10
- Drops startup file
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2