cb2c0cc6c0c22268d63ec8f00dc6e63950306a0a76a616371414ae26394c7e7d | Triage

Sharing

General

Target

4d443884e392ce1b235c63598b1b14fd
Size

506KB
Sample

240109-efk17aeedk
MD5

4d443884e392ce1b235c63598b1b14fd
SHA1

c6cb005d64dd656d5e0a0eb341a28c587d73041b
SHA256

cb2c0cc6c0c22268d63ec8f00dc6e63950306a0a76a616371414ae26394c7e7d
SHA512

7ebd994bab0d303cfd2cf5b06dfbc81f28dab4773b1a5cda23151fda090bbb5394215b5a258318ad1585de13aa1c15b8b747303c8b69e68f294b48c1050b8c32
SSDEEP

12288:YXgwIIqJ/EPvQwYYGPlo+fJ1IRDwE/kH+ZdjjK:R7IksPvQwYYGNPJ1IBLsHwjjK

Score

7^/10

Malware Config

Targets

- Target
  
  4d443884e392ce1b235c63598b1b14fd
- Size
  
  506KB
- MD5
  
  4d443884e392ce1b235c63598b1b14fd
- SHA1
  
  c6cb005d64dd656d5e0a0eb341a28c587d73041b
- SHA256
  
  cb2c0cc6c0c22268d63ec8f00dc6e63950306a0a76a616371414ae26394c7e7d
- SHA512
  
  7ebd994bab0d303cfd2cf5b06dfbc81f28dab4773b1a5cda23151fda090bbb5394215b5a258318ad1585de13aa1c15b8b747303c8b69e68f294b48c1050b8c32
- SSDEEP
  
  12288:YXgwIIqJ/EPvQwYYGPlo+fJ1IRDwE/kH+ZdjjK:R7IksPvQwYYGNPJ1IBLsHwjjK
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2