5396ffe4adbd6bb32a07e4be7349dd41199d66f8bec3250d9aa2e574169f7140 | Triage

Sharing

General

Target

769b6b751a8f67f0651042dc90188e6d
Size

506KB
Sample

240126-g16jqsfgb3
MD5

769b6b751a8f67f0651042dc90188e6d
SHA1

1639c1c51f391ff82fbfba3d69d2d5b9d3ef63b4
SHA256

5396ffe4adbd6bb32a07e4be7349dd41199d66f8bec3250d9aa2e574169f7140
SHA512

a7a57074bce91d493be6fa9c289bd4621822f9d0665b476cd046e3a7151940403e711045f866a4473108765b0fe462dba0dd9fca1c49dd43f168a5eb6ef0ed98
SSDEEP

12288:4I8eZ8Hon/77zo8z+hqt6gj2FyV5gOVyokMUVd:/8Wz9+ej20VHyokZ

Score

7^/10

Malware Config

Targets

- Target
  
  769b6b751a8f67f0651042dc90188e6d
- Size
  
  506KB
- MD5
  
  769b6b751a8f67f0651042dc90188e6d
- SHA1
  
  1639c1c51f391ff82fbfba3d69d2d5b9d3ef63b4
- SHA256
  
  5396ffe4adbd6bb32a07e4be7349dd41199d66f8bec3250d9aa2e574169f7140
- SHA512
  
  a7a57074bce91d493be6fa9c289bd4621822f9d0665b476cd046e3a7151940403e711045f866a4473108765b0fe462dba0dd9fca1c49dd43f168a5eb6ef0ed98
- SSDEEP
  
  12288:4I8eZ8Hon/77zo8z+hqt6gj2FyV5gOVyokMUVd:/8Wz9+ej20VHyokZ
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2