a0cad7dff911ed7f05a22f70dbda8842215e0fa8e8db5ae1bde96a22ab4260bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

514434632bf8857bee6ad98c1a300877
Size

241KB
Sample

240110-wxzpcadgf2
MD5

514434632bf8857bee6ad98c1a300877
SHA1

b399d4fdb6623cd2b687bbebdb3134f118515028
SHA256

a0cad7dff911ed7f05a22f70dbda8842215e0fa8e8db5ae1bde96a22ab4260bd
SHA512

4a5a1005ddf218f5e55bfb84902738068207540926ce2f1a9041353257b5e0b966e3790a8292eacc8f8fa3b07b9b578478f1d6d14a067098df715b3aa97dc793
SSDEEP

6144:2Q0LRZ8NQMCW16ttq+wOU8JRMk4bGF9P434ad61PfxW:2QMv8+q16yhOJpkw2d6hfs

Score

7^/10

Malware Config

Targets

- Target
  
  514434632bf8857bee6ad98c1a300877
- Size
  
  241KB
- MD5
  
  514434632bf8857bee6ad98c1a300877
- SHA1
  
  b399d4fdb6623cd2b687bbebdb3134f118515028
- SHA256
  
  a0cad7dff911ed7f05a22f70dbda8842215e0fa8e8db5ae1bde96a22ab4260bd
- SHA512
  
  4a5a1005ddf218f5e55bfb84902738068207540926ce2f1a9041353257b5e0b966e3790a8292eacc8f8fa3b07b9b578478f1d6d14a067098df715b3aa97dc793
- SSDEEP
  
  6144:2Q0LRZ8NQMCW16ttq+wOU8JRMk4bGF9P434ad61PfxW:2QMv8+q16yhOJpkw2d6hfs
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2