0e9d541b5aae1a23bf0e264c894a79134814446471d69afd344cab0900b3bac6 | Triage

Sharing

General

Target

5c36a04c38bbc50854d6333a998f2748
Size

241KB
Sample

240115-fsjvbsahc8
MD5

5c36a04c38bbc50854d6333a998f2748
SHA1

66399335c124226d9874f40bef626b61a44e224a
SHA256

0e9d541b5aae1a23bf0e264c894a79134814446471d69afd344cab0900b3bac6
SHA512

87dd73834373594a558f5d84df7e694f8b225019bededaaefc444898f91c58dc060f8b8a8083b84f7030d42c717837cdf9038361547e34e89a055766788ec95b
SSDEEP

6144:Nkxyxpt1eU+fVOLkXfbnKJ5qzbs7JFEe66:NMUYQkvbnKGzbkHS6

Score

7^/10

Malware Config

Targets

- Target
  
  5c36a04c38bbc50854d6333a998f2748
- Size
  
  241KB
- MD5
  
  5c36a04c38bbc50854d6333a998f2748
- SHA1
  
  66399335c124226d9874f40bef626b61a44e224a
- SHA256
  
  0e9d541b5aae1a23bf0e264c894a79134814446471d69afd344cab0900b3bac6
- SHA512
  
  87dd73834373594a558f5d84df7e694f8b225019bededaaefc444898f91c58dc060f8b8a8083b84f7030d42c717837cdf9038361547e34e89a055766788ec95b
- SSDEEP
  
  6144:Nkxyxpt1eU+fVOLkXfbnKJ5qzbs7JFEe66:NMUYQkvbnKGzbkHS6
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2