061d389127330e380776d6c8912223a0725e2a74773a05e9754310ac67f7cbbf | Triage

Sharing

General

Target

70cf844dbcda65dd1149d2fd998a7b4c
Size

385KB
Sample

240123-27l4wscea5
MD5

70cf844dbcda65dd1149d2fd998a7b4c
SHA1

69768469573ed5c98124676031b4ba64ffd54656
SHA256

061d389127330e380776d6c8912223a0725e2a74773a05e9754310ac67f7cbbf
SHA512

62b7a4feea4808282f7e337858743dc6ee8cc25fc81cbdfa62ea07d16f4ec546271f77f102961c9c835d0d46e7bf1a630d94cc50bf83da065879305578fb01ca
SSDEEP

12288:0YT6BhEBtpRzJsUfd0CNFGKDID588c7ZJc7lbMB:0Y6hEBMu1ClDJct0MB

Score

7^/10

Malware Config

Targets

- Target
  
  70cf844dbcda65dd1149d2fd998a7b4c
- Size
  
  385KB
- MD5
  
  70cf844dbcda65dd1149d2fd998a7b4c
- SHA1
  
  69768469573ed5c98124676031b4ba64ffd54656
- SHA256
  
  061d389127330e380776d6c8912223a0725e2a74773a05e9754310ac67f7cbbf
- SHA512
  
  62b7a4feea4808282f7e337858743dc6ee8cc25fc81cbdfa62ea07d16f4ec546271f77f102961c9c835d0d46e7bf1a630d94cc50bf83da065879305578fb01ca
- SSDEEP
  
  12288:0YT6BhEBtpRzJsUfd0CNFGKDID588c7ZJc7lbMB:0Y6hEBMu1ClDJct0MB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2