42dc81c388ddb1dc975e20948291a18e1368e3540bd377ea85d1ad11d11e3bae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

367e293cdeda9a68015998842260a103
Size

385KB
Sample

231231-pwrtsaacdp
MD5

367e293cdeda9a68015998842260a103
SHA1

dcf1fdb7c856baf2fafc27f881760f96c05e55fd
SHA256

42dc81c388ddb1dc975e20948291a18e1368e3540bd377ea85d1ad11d11e3bae
SHA512

ea93f10809b53187308a1322896c77dbbc39581418fcdf8326e0f8e3169f67e9b2483ae645a3fb30d950e1d73e9d4be07d85b4a09a20cc80df269f5e8d479c49
SSDEEP

6144:KENLDqeVYBG3ZUDbBi56gVMaYkEt6EApL590cP0DozpLNgB:KENxVYBG3api56haYBtX0Lf3cLB

Score

7^/10

Malware Config

Targets

- Target
  
  367e293cdeda9a68015998842260a103
- Size
  
  385KB
- MD5
  
  367e293cdeda9a68015998842260a103
- SHA1
  
  dcf1fdb7c856baf2fafc27f881760f96c05e55fd
- SHA256
  
  42dc81c388ddb1dc975e20948291a18e1368e3540bd377ea85d1ad11d11e3bae
- SHA512
  
  ea93f10809b53187308a1322896c77dbbc39581418fcdf8326e0f8e3169f67e9b2483ae645a3fb30d950e1d73e9d4be07d85b4a09a20cc80df269f5e8d479c49
- SSDEEP
  
  6144:KENLDqeVYBG3ZUDbBi56gVMaYkEt6EApL590cP0DozpLNgB:KENxVYBG3api56haYBtX0Lf3cLB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2