1d337f606dc3ad171995497053bbfbfba5ac1713681c1885c3835ce9e7fb02ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

411711a7d59b6d84127cd06d219d673d
Size

241KB
Sample

240104-rntphshgdq
MD5

411711a7d59b6d84127cd06d219d673d
SHA1

22d34218bd915d74216083c09fcfc6cb019f42bf
SHA256

1d337f606dc3ad171995497053bbfbfba5ac1713681c1885c3835ce9e7fb02ac
SHA512

ebdc6027c409a6041f222d338d9be4a4326148b2c4b910a92244c3d56c88aacb891ea5680d0a0c3aa6f4c7eea5871162f004c131f0b00df17233911fd9ad3c03
SSDEEP

6144:cgdfY4IAg+SFH721SlAVqq3HVyU80L9TWKqV5l:NdgqgTHik6qGHwUnL9Tq5l

Score

7^/10

Malware Config

Targets

- Target
  
  411711a7d59b6d84127cd06d219d673d
- Size
  
  241KB
- MD5
  
  411711a7d59b6d84127cd06d219d673d
- SHA1
  
  22d34218bd915d74216083c09fcfc6cb019f42bf
- SHA256
  
  1d337f606dc3ad171995497053bbfbfba5ac1713681c1885c3835ce9e7fb02ac
- SHA512
  
  ebdc6027c409a6041f222d338d9be4a4326148b2c4b910a92244c3d56c88aacb891ea5680d0a0c3aa6f4c7eea5871162f004c131f0b00df17233911fd9ad3c03
- SSDEEP
  
  6144:cgdfY4IAg+SFH721SlAVqq3HVyU80L9TWKqV5l:NdgqgTHik6qGHwUnL9Tq5l
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2