4975dd75815059f1211190b95373db9ab09c2a6fe29cb12823d103c1f0ea73e0 | Triage

Sharing

General

Target

4e53918b347fee72ddbbf0ad8b0b12e9
Size

385KB
Sample

240109-pv2mlaafhj
MD5

4e53918b347fee72ddbbf0ad8b0b12e9
SHA1

726c1af5f5b2d41f54555c064acb9d6e8e445aca
SHA256

4975dd75815059f1211190b95373db9ab09c2a6fe29cb12823d103c1f0ea73e0
SHA512

4e8583d130e76240d32d933200bf5442b5d7d88e31e65dd225debf6ef9dfb8a54627e5d382140044f5e5051305d82bf8dfc3b0449a06d3ea351da6d2567192f4
SSDEEP

6144:b2Ds25zFpguxN5sXHw3UbHo4ylT1ZooTlYPGoYyw4cE8iL4HP8Y5k8kYJmD9sSi4:qrAu7YITl1SoGu9Fzjt2/9MSB

Score

7^/10

Malware Config

Targets

- Target
  
  4e53918b347fee72ddbbf0ad8b0b12e9
- Size
  
  385KB
- MD5
  
  4e53918b347fee72ddbbf0ad8b0b12e9
- SHA1
  
  726c1af5f5b2d41f54555c064acb9d6e8e445aca
- SHA256
  
  4975dd75815059f1211190b95373db9ab09c2a6fe29cb12823d103c1f0ea73e0
- SHA512
  
  4e8583d130e76240d32d933200bf5442b5d7d88e31e65dd225debf6ef9dfb8a54627e5d382140044f5e5051305d82bf8dfc3b0449a06d3ea351da6d2567192f4
- SSDEEP
  
  6144:b2Ds25zFpguxN5sXHw3UbHo4ylT1ZooTlYPGoYyw4cE8iL4HP8Y5k8kYJmD9sSi4:qrAu7YITl1SoGu9Fzjt2/9MSB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2