a481ebd882db33f0ccf460d5b31fd8a39fbf0df0da4f31b986d71fadea662a74 | Triage

Sharing

General

Target

754d3a927fb63fa749f9a0f3f9e35279
Size

1000KB
Sample

240125-xzyqhaedek
MD5

754d3a927fb63fa749f9a0f3f9e35279
SHA1

4982694f943e3135b8cb76f0d823198036e1f831
SHA256

a481ebd882db33f0ccf460d5b31fd8a39fbf0df0da4f31b986d71fadea662a74
SHA512

14e74d0525a8162de0a0357b65c2d244ed867a6f652f5bdce8cbb2209c46f14e08101539fee77e91215aa6f40c5f160a02bc818ce7dfb7c9430aa9adaafb0f5d
SSDEEP

24576:9s4/NwlzW4yDOzEf+51B+5vMiqt0gj2ed:9sCqVeyqOL

Score

7^/10

Malware Config

Targets

- Target
  
  754d3a927fb63fa749f9a0f3f9e35279
- Size
  
  1000KB
- MD5
  
  754d3a927fb63fa749f9a0f3f9e35279
- SHA1
  
  4982694f943e3135b8cb76f0d823198036e1f831
- SHA256
  
  a481ebd882db33f0ccf460d5b31fd8a39fbf0df0da4f31b986d71fadea662a74
- SHA512
  
  14e74d0525a8162de0a0357b65c2d244ed867a6f652f5bdce8cbb2209c46f14e08101539fee77e91215aa6f40c5f160a02bc818ce7dfb7c9430aa9adaafb0f5d
- SSDEEP
  
  24576:9s4/NwlzW4yDOzEf+51B+5vMiqt0gj2ed:9sCqVeyqOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2