ab76c20191f2c5ccebb647e39257e809e83c5bb619497ffbb8eb2bb6eeaa57a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

453b6b0b37ee49fb346d5e04c0bfb8df
Size

1000KB
Sample

240106-emnqnagchr
MD5

453b6b0b37ee49fb346d5e04c0bfb8df
SHA1

efdfe8acd2a1624120c31c2412e3f598fb4ab8f4
SHA256

ab76c20191f2c5ccebb647e39257e809e83c5bb619497ffbb8eb2bb6eeaa57a7
SHA512

c40ab7c190140fbe7cfcb3f6debc055afa5c8ba183a08edec8fb829d5f084a47c89862b98922777556c6f81a6698ad5d490abe188a98f5500b64ba6a244569d0
SSDEEP

24576:Zh++YOo6j6DDSXnCSxb1B+5vMiqt0gj2ed:ZaL66WXCS5qOL

Score

7^/10

Malware Config

Targets

- Target
  
  453b6b0b37ee49fb346d5e04c0bfb8df
- Size
  
  1000KB
- MD5
  
  453b6b0b37ee49fb346d5e04c0bfb8df
- SHA1
  
  efdfe8acd2a1624120c31c2412e3f598fb4ab8f4
- SHA256
  
  ab76c20191f2c5ccebb647e39257e809e83c5bb619497ffbb8eb2bb6eeaa57a7
- SHA512
  
  c40ab7c190140fbe7cfcb3f6debc055afa5c8ba183a08edec8fb829d5f084a47c89862b98922777556c6f81a6698ad5d490abe188a98f5500b64ba6a244569d0
- SSDEEP
  
  24576:Zh++YOo6j6DDSXnCSxb1B+5vMiqt0gj2ed:ZaL66WXCS5qOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2