f74e6c6e6d19a64254d74e98901144486d2e359fab4e21f818c7d4c72b7928db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ef1f5a985a26a50781d07c540ca18e2
Size

385KB
Sample

240103-yrd7kabhh5
MD5

3ef1f5a985a26a50781d07c540ca18e2
SHA1

c78fd117e3e290b912f81ce4432ccbb8b239cfb4
SHA256

f74e6c6e6d19a64254d74e98901144486d2e359fab4e21f818c7d4c72b7928db
SHA512

ad249534766feac1dc6dd1dd1668817517079966469391101624b847d0e99d6ea66257819f6377bf9364f65e7471222a03f58a4aa82ae23913b5c69093f71d8b
SSDEEP

6144:I4TRbGJpsJwue/Zfn3gtrqJcIKyrROQpo+E5KFT69Qv6l2OLwPDLTuPpPi8xysLB:9Rbmd3F9JhZFTSQv0fLaDXuPpryAB

Score

7^/10

Malware Config

Targets

- Target
  
  3ef1f5a985a26a50781d07c540ca18e2
- Size
  
  385KB
- MD5
  
  3ef1f5a985a26a50781d07c540ca18e2
- SHA1
  
  c78fd117e3e290b912f81ce4432ccbb8b239cfb4
- SHA256
  
  f74e6c6e6d19a64254d74e98901144486d2e359fab4e21f818c7d4c72b7928db
- SHA512
  
  ad249534766feac1dc6dd1dd1668817517079966469391101624b847d0e99d6ea66257819f6377bf9364f65e7471222a03f58a4aa82ae23913b5c69093f71d8b
- SSDEEP
  
  6144:I4TRbGJpsJwue/Zfn3gtrqJcIKyrROQpo+E5KFT69Qv6l2OLwPDLTuPpPi8xysLB:9Rbmd3F9JhZFTSQv0fLaDXuPpryAB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2