cc8914faff6ce95d936026b7aa1ae6bb00f4e26ce1aa96d817971e907e5c7615 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

386acaf42f7765a42796e580c5590705
Size

1000KB
Sample

231231-qzc1gagfg4
MD5

386acaf42f7765a42796e580c5590705
SHA1

84b8a9c49e1ac38726dfe6aaa8f00bff3296e3d3
SHA256

cc8914faff6ce95d936026b7aa1ae6bb00f4e26ce1aa96d817971e907e5c7615
SHA512

2f727282d41f2b1b5fe8200416f6559602925d8e1f280429670d035260912d703a841cefa2fbba8ebf5ea32fb7fc3d565b6938b3b618f5e3d2ce2b6246b4da06
SSDEEP

24576:IKJt0cwiEOpTewd1XQsvqj1B+5vMiqt0gj2ed:jtiEeQ3UqOL

Score

7^/10

Malware Config

Targets

- Target
  
  386acaf42f7765a42796e580c5590705
- Size
  
  1000KB
- MD5
  
  386acaf42f7765a42796e580c5590705
- SHA1
  
  84b8a9c49e1ac38726dfe6aaa8f00bff3296e3d3
- SHA256
  
  cc8914faff6ce95d936026b7aa1ae6bb00f4e26ce1aa96d817971e907e5c7615
- SHA512
  
  2f727282d41f2b1b5fe8200416f6559602925d8e1f280429670d035260912d703a841cefa2fbba8ebf5ea32fb7fc3d565b6938b3b618f5e3d2ce2b6246b4da06
- SSDEEP
  
  24576:IKJt0cwiEOpTewd1XQsvqj1B+5vMiqt0gj2ed:jtiEeQ3UqOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2