7781867a58749f8cce49e16eefddc54e0cbdb2117e8ce8d3c43729a6de47282c | Triage

Sharing

General

Target

578a52f62ffa409c6e5b2c9e5d801e6a
Size

241KB
Sample

240113-a4hthsghbp
MD5

578a52f62ffa409c6e5b2c9e5d801e6a
SHA1

fe2fe05a72f46fe6b1cc917d488c883952497b15
SHA256

7781867a58749f8cce49e16eefddc54e0cbdb2117e8ce8d3c43729a6de47282c
SHA512

df233af664978f6d5ee6ad957b36383d3af71b75e654af944ab71fbde6525961bb836a70c064828082a08ae780f0b28fbbed2f16e11ce9423a448b5be419d0b5
SSDEEP

6144:POGB6vFOdkKdsMI/fIi+poWa9s9OEttzDjST7kw9Y5:U9OdkZMI+GStteTrk

Score

7^/10

Malware Config

Targets

- Target
  
  578a52f62ffa409c6e5b2c9e5d801e6a
- Size
  
  241KB
- MD5
  
  578a52f62ffa409c6e5b2c9e5d801e6a
- SHA1
  
  fe2fe05a72f46fe6b1cc917d488c883952497b15
- SHA256
  
  7781867a58749f8cce49e16eefddc54e0cbdb2117e8ce8d3c43729a6de47282c
- SHA512
  
  df233af664978f6d5ee6ad957b36383d3af71b75e654af944ab71fbde6525961bb836a70c064828082a08ae780f0b28fbbed2f16e11ce9423a448b5be419d0b5
- SSDEEP
  
  6144:POGB6vFOdkKdsMI/fIi+poWa9s9OEttzDjST7kw9Y5:U9OdkZMI+GStteTrk
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2