31cce5e3244544c084f8b76d6d3e00500e4d0c69a146a540112e2c5e5a095353 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f33ccc285b2e8ff59615450c342290f
Size

506KB
Sample

240110-bpskvacch7
MD5

4f33ccc285b2e8ff59615450c342290f
SHA1

94eaf9e1b7cfe833f9ee4632054c8111328858f1
SHA256

31cce5e3244544c084f8b76d6d3e00500e4d0c69a146a540112e2c5e5a095353
SHA512

34cbb7310b6a4e9164bb4e65c075cc237ceadd7ea7b4d6526c034d6acc79da581b9ca39b35541e52d9f6c39140b0a5af2652ca143aae0544b7a26281155761d9
SSDEEP

12288:adqYp5nmQgh2DXGnh+bCYHam3ll7Q0vez:akg4QgeXGnhCxaq7Qp

Score

7^/10

Malware Config

Targets

- Target
  
  4f33ccc285b2e8ff59615450c342290f
- Size
  
  506KB
- MD5
  
  4f33ccc285b2e8ff59615450c342290f
- SHA1
  
  94eaf9e1b7cfe833f9ee4632054c8111328858f1
- SHA256
  
  31cce5e3244544c084f8b76d6d3e00500e4d0c69a146a540112e2c5e5a095353
- SHA512
  
  34cbb7310b6a4e9164bb4e65c075cc237ceadd7ea7b4d6526c034d6acc79da581b9ca39b35541e52d9f6c39140b0a5af2652ca143aae0544b7a26281155761d9
- SSDEEP
  
  12288:adqYp5nmQgh2DXGnh+bCYHam3ll7Q0vez:akg4QgeXGnhCxaq7Qp
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2