e9f46417210b56c17ebc3efff1b3ce58362062590abc803c4f121e0039490827 | Triage

Sharing

General

Target

72b68ae69c6f6afe3ed3c412af579cf0
Size

1000KB
Sample

240124-wvxrzafbek
MD5

72b68ae69c6f6afe3ed3c412af579cf0
SHA1

cfcd80a9c589c2f43b83f6ea778fc8d46e98a2c8
SHA256

e9f46417210b56c17ebc3efff1b3ce58362062590abc803c4f121e0039490827
SHA512

a0090ba524708b3b18012f6150a8a0a10158f1b968880f8234551e803476e43532d172907c6d10300929b9c68d9555ae75323834f86abb7fe81f7b8f63540d95
SSDEEP

24576:rlGkQHzXMs6JLCpXkay1B+5vMiqt0gj2ed:ZhczXMsIsXkaYqOL

Score

7^/10

Malware Config

Targets

- Target
  
  72b68ae69c6f6afe3ed3c412af579cf0
- Size
  
  1000KB
- MD5
  
  72b68ae69c6f6afe3ed3c412af579cf0
- SHA1
  
  cfcd80a9c589c2f43b83f6ea778fc8d46e98a2c8
- SHA256
  
  e9f46417210b56c17ebc3efff1b3ce58362062590abc803c4f121e0039490827
- SHA512
  
  a0090ba524708b3b18012f6150a8a0a10158f1b968880f8234551e803476e43532d172907c6d10300929b9c68d9555ae75323834f86abb7fe81f7b8f63540d95
- SSDEEP
  
  24576:rlGkQHzXMs6JLCpXkay1B+5vMiqt0gj2ed:ZhczXMsIsXkaYqOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2