06b9512d88d30ce1ec0a10ec7350f35e6ea501dfaac3fd8b27f0be9f5495fe81 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66ef8f60d5eb902fd5fb6a12e13e82cf
Size

385KB
Sample

240119-haw32sgeak
MD5

66ef8f60d5eb902fd5fb6a12e13e82cf
SHA1

5c25cc9dc90c77233b3c337ed5ef67856c92af29
SHA256

06b9512d88d30ce1ec0a10ec7350f35e6ea501dfaac3fd8b27f0be9f5495fe81
SHA512

c56824848d7e61078b1431c1cc6c13e83bcc1f53fce026729fb2914fd5bc57b0da05d6781dca7fd33e9e9da5fc328132a38c069255a7cf1f5cd3a6deab5e9064
SSDEEP

6144:tUvZa7QcQaBaUPiVKkx69OJD5tdrOywmG9lhLkqyeIB:GtXaM7LiOJFPQ9lhLkqyeIB

Score

7^/10

Malware Config

Targets

- Target
  
  66ef8f60d5eb902fd5fb6a12e13e82cf
- Size
  
  385KB
- MD5
  
  66ef8f60d5eb902fd5fb6a12e13e82cf
- SHA1
  
  5c25cc9dc90c77233b3c337ed5ef67856c92af29
- SHA256
  
  06b9512d88d30ce1ec0a10ec7350f35e6ea501dfaac3fd8b27f0be9f5495fe81
- SHA512
  
  c56824848d7e61078b1431c1cc6c13e83bcc1f53fce026729fb2914fd5bc57b0da05d6781dca7fd33e9e9da5fc328132a38c069255a7cf1f5cd3a6deab5e9064
- SSDEEP
  
  6144:tUvZa7QcQaBaUPiVKkx69OJD5tdrOywmG9lhLkqyeIB:GtXaM7LiOJFPQ9lhLkqyeIB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2