608384aa275db4a8ee1cb4103c0233d41bdceb9175f1a7bbea746915784d1abd | Triage

Sharing

General

Target

608384aa275db4a8ee1cb4103c0233d41bdceb9175f1a7bbea746915784d1abd
Size

324KB
Sample

240115-fhnersafe3
MD5

cd3fe09d482fd1f94e40cc827f435f2b
SHA1

e4a896967bca28f203221972674d4b0d3c214a00
SHA256

608384aa275db4a8ee1cb4103c0233d41bdceb9175f1a7bbea746915784d1abd
SHA512

18cfd48356726af4d81b9909a0beb5cb17698ca8a08dea22c06aa67707e9518d4b39261add14315abd0cb255232760cfdcaa0288e33db04e66e7ca869edc09bb
SSDEEP

6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj

Score

7^/10

Malware Config

Targets

- Target
  
  608384aa275db4a8ee1cb4103c0233d41bdceb9175f1a7bbea746915784d1abd
- Size
  
  324KB
- MD5
  
  cd3fe09d482fd1f94e40cc827f435f2b
- SHA1
  
  e4a896967bca28f203221972674d4b0d3c214a00
- SHA256
  
  608384aa275db4a8ee1cb4103c0233d41bdceb9175f1a7bbea746915784d1abd
- SHA512
  
  18cfd48356726af4d81b9909a0beb5cb17698ca8a08dea22c06aa67707e9518d4b39261add14315abd0cb255232760cfdcaa0288e33db04e66e7ca869edc09bb
- SSDEEP
  
  6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Score

7^/10
- Executes dropped EXE
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2