86f0f5d64431fca786ae5e56c96f5f47fe7d5fe3b3053be95d6b3a5e2f02ba64 | Triage

Sharing

General

Target

48ca9c9c17b996f3ac0374ca862c790b
Size

506KB
Sample

240107-m5b4kscfa2
MD5

48ca9c9c17b996f3ac0374ca862c790b
SHA1

1ab8b6d63ae33882c4cacaa5df1416b35f7aecc6
SHA256

86f0f5d64431fca786ae5e56c96f5f47fe7d5fe3b3053be95d6b3a5e2f02ba64
SHA512

967fcf305ae6da21879f8d3ecf51705f70ca18d6b2e5ee4bba03fab6c60468a6e30a3fd9a9fd2d278cbcfe5a91e8748c09c2c01fd961ab30a12e13684060e7f7
SSDEEP

12288:DNllL8QdHL4/WN0oA1fhJJNALQsBMctKCe1t+fqJhOSXIWYlX4:DbniZsNetASDY+

Score

7^/10

Malware Config

Targets

- Target
  
  48ca9c9c17b996f3ac0374ca862c790b
- Size
  
  506KB
- MD5
  
  48ca9c9c17b996f3ac0374ca862c790b
- SHA1
  
  1ab8b6d63ae33882c4cacaa5df1416b35f7aecc6
- SHA256
  
  86f0f5d64431fca786ae5e56c96f5f47fe7d5fe3b3053be95d6b3a5e2f02ba64
- SHA512
  
  967fcf305ae6da21879f8d3ecf51705f70ca18d6b2e5ee4bba03fab6c60468a6e30a3fd9a9fd2d278cbcfe5a91e8748c09c2c01fd961ab30a12e13684060e7f7
- SSDEEP
  
  12288:DNllL8QdHL4/WN0oA1fhJJNALQsBMctKCe1t+fqJhOSXIWYlX4:DbniZsNetASDY+
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2