2f1f3a30eae058649a55c696ddafb8c0fa4a5ebf632ec366455f029d3abc272b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a2312f7d4f1e66a1bc9d653fbf6597e
Size

1000KB
Sample

240114-dwxjgscbg5
MD5

5a2312f7d4f1e66a1bc9d653fbf6597e
SHA1

92dd9d4cc535be696198c650c0bf03998b194db5
SHA256

2f1f3a30eae058649a55c696ddafb8c0fa4a5ebf632ec366455f029d3abc272b
SHA512

017b488c1b48ff4c176e2ef458bdd387db81f3c6a1f4bb2c0d36917324f42fd6819c36b7928fe24838a0e61f544c730071a1f7cc4012e798ac0903f95f593d3a
SSDEEP

24576:0g4KWqmcDqhHdCK/JJFrBRNa+1B+5vMiqt0gj2ed:0IWqmSCdCKdrkMqOL

Score

7^/10

Malware Config

Targets

- Target
  
  5a2312f7d4f1e66a1bc9d653fbf6597e
- Size
  
  1000KB
- MD5
  
  5a2312f7d4f1e66a1bc9d653fbf6597e
- SHA1
  
  92dd9d4cc535be696198c650c0bf03998b194db5
- SHA256
  
  2f1f3a30eae058649a55c696ddafb8c0fa4a5ebf632ec366455f029d3abc272b
- SHA512
  
  017b488c1b48ff4c176e2ef458bdd387db81f3c6a1f4bb2c0d36917324f42fd6819c36b7928fe24838a0e61f544c730071a1f7cc4012e798ac0903f95f593d3a
- SSDEEP
  
  24576:0g4KWqmcDqhHdCK/JJFrBRNa+1B+5vMiqt0gj2ed:0IWqmSCdCKdrkMqOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2