59a4a301fe55d505461c1fbed0c7f3e1daf44971128c210abf0d490f34c8a989 | Triage

Sharing

General

Target

3672e708149012169a35050dafd1dbad
Size

506KB
Sample

231231-pvpyssaacj
MD5

3672e708149012169a35050dafd1dbad
SHA1

fc64a231eda5ef41ba25ca5528122f09affee1e2
SHA256

59a4a301fe55d505461c1fbed0c7f3e1daf44971128c210abf0d490f34c8a989
SHA512

78fff4f2374cf889a98e0a4d3989772ce8ce4b15e1d02d9b8ac335e3beabd26b25e52d7d04cfe0687255d267862dbe238a313f89ea86b98011b8b151baa82a81
SSDEEP

12288:kZxXqndKGB7SAhkhqrs25LXp5fT9aBtBvn7FGoA:+6nQj0wiL9QtB/70

Score

7^/10

Malware Config

Targets

- Target
  
  3672e708149012169a35050dafd1dbad
- Size
  
  506KB
- MD5
  
  3672e708149012169a35050dafd1dbad
- SHA1
  
  fc64a231eda5ef41ba25ca5528122f09affee1e2
- SHA256
  
  59a4a301fe55d505461c1fbed0c7f3e1daf44971128c210abf0d490f34c8a989
- SHA512
  
  78fff4f2374cf889a98e0a4d3989772ce8ce4b15e1d02d9b8ac335e3beabd26b25e52d7d04cfe0687255d267862dbe238a313f89ea86b98011b8b151baa82a81
- SSDEEP
  
  12288:kZxXqndKGB7SAhkhqrs25LXp5fT9aBtBvn7FGoA:+6nQj0wiL9QtB/70
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2