9d3146fca23a927e919d367efa5420b308320c9c2e878435802753c23518aacd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37ed841c3cd60395d5f8bba9f474a45b
Size

241KB
Sample

231231-qn6teabbfq
MD5

37ed841c3cd60395d5f8bba9f474a45b
SHA1

9e3234513299b83ec1188f29ced2a31b59d76208
SHA256

9d3146fca23a927e919d367efa5420b308320c9c2e878435802753c23518aacd
SHA512

0e5e7002487512b50d77d862fc21179f7ec77e0cf5b5b2e9d544e1ab0bd966d356b01dabe6f28ecf4eb0eae4aceddacb57a8290d65e9063ae83fc86c6ff964d7
SSDEEP

6144:lPkn5s8Lrb3/htxsYgjwb74rNwMQ+FDC++IpA:ChrNsmENRD9C++Ie

Score

7^/10

Malware Config

Targets

- Target
  
  37ed841c3cd60395d5f8bba9f474a45b
- Size
  
  241KB
- MD5
  
  37ed841c3cd60395d5f8bba9f474a45b
- SHA1
  
  9e3234513299b83ec1188f29ced2a31b59d76208
- SHA256
  
  9d3146fca23a927e919d367efa5420b308320c9c2e878435802753c23518aacd
- SHA512
  
  0e5e7002487512b50d77d862fc21179f7ec77e0cf5b5b2e9d544e1ab0bd966d356b01dabe6f28ecf4eb0eae4aceddacb57a8290d65e9063ae83fc86c6ff964d7
- SSDEEP
  
  6144:lPkn5s8Lrb3/htxsYgjwb74rNwMQ+FDC++IpA:ChrNsmENRD9C++Ie
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2