f6dc3347acc61561991dd429e7fe40f5234da641d5121e95ffa62fc9817f08d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

703646f1cf045ad81fcad4ef081631b5
Size

241KB
Sample

240123-wp1axaefh8
MD5

703646f1cf045ad81fcad4ef081631b5
SHA1

d48d235f4d07b017ea464d5ea194a7d18fef03b4
SHA256

f6dc3347acc61561991dd429e7fe40f5234da641d5121e95ffa62fc9817f08d7
SHA512

ce339914534ebe4cc43c2e1996e906d2480dd6432cbb91d02de8f776f7318b6ffde1e72128e43c7f2b0559eefac01c4f218d319e618481fc1db0fc4bbb4fd331
SSDEEP

6144:000DjikTqCuHVSVouf/57qV2uERc1DjwJ/2YwttCKhFpK:000HikTqh4VQV2uEK1w5qK

Score

7^/10

Malware Config

Targets

- Target
  
  703646f1cf045ad81fcad4ef081631b5
- Size
  
  241KB
- MD5
  
  703646f1cf045ad81fcad4ef081631b5
- SHA1
  
  d48d235f4d07b017ea464d5ea194a7d18fef03b4
- SHA256
  
  f6dc3347acc61561991dd429e7fe40f5234da641d5121e95ffa62fc9817f08d7
- SHA512
  
  ce339914534ebe4cc43c2e1996e906d2480dd6432cbb91d02de8f776f7318b6ffde1e72128e43c7f2b0559eefac01c4f218d319e618481fc1db0fc4bbb4fd331
- SSDEEP
  
  6144:000DjikTqCuHVSVouf/57qV2uERc1DjwJ/2YwttCKhFpK:000HikTqh4VQV2uEK1w5qK
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2