37cc799f7d60d58cc6dd52f583b1df349dd3181a1ac53096eab0bef737032bcc | Triage

Sharing

General

Target

4452f20a8b51fbee943b440d41d36dbb
Size

385KB
Sample

240105-yvrl3ahfhm
MD5

4452f20a8b51fbee943b440d41d36dbb
SHA1

d6143d88fbb4a98539c7b19aaa1afa403382ce5c
SHA256

37cc799f7d60d58cc6dd52f583b1df349dd3181a1ac53096eab0bef737032bcc
SHA512

8555117f035172cb6c7a93cfa46aaaa6ea06e6399f6ef83654cc538f0aab0521c3278d0e5486bf945e20b0f80fffd65f4599a8edf15812308025fa03e9f54c98
SSDEEP

12288:bhdvKoRW92UJaNs4mtey07rDrzUZjOBLNFB:XFRW92U94mv07rDr40fB

Score

7^/10

Malware Config

Targets

- Target
  
  4452f20a8b51fbee943b440d41d36dbb
- Size
  
  385KB
- MD5
  
  4452f20a8b51fbee943b440d41d36dbb
- SHA1
  
  d6143d88fbb4a98539c7b19aaa1afa403382ce5c
- SHA256
  
  37cc799f7d60d58cc6dd52f583b1df349dd3181a1ac53096eab0bef737032bcc
- SHA512
  
  8555117f035172cb6c7a93cfa46aaaa6ea06e6399f6ef83654cc538f0aab0521c3278d0e5486bf945e20b0f80fffd65f4599a8edf15812308025fa03e9f54c98
- SSDEEP
  
  12288:bhdvKoRW92UJaNs4mtey07rDrzUZjOBLNFB:XFRW92U94mv07rDr40fB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2