f1946240f28890dafbc11dd11f350e00bd8efea0e7e951b7b56bd72ea002bd9e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7836b2773a60a0bb65d90a68f0fd9b08
Size

506KB
Sample

240126-ybn2tsedcn
MD5

7836b2773a60a0bb65d90a68f0fd9b08
SHA1

1712372e6927621f61f56c20821351cb3feb629b
SHA256

f1946240f28890dafbc11dd11f350e00bd8efea0e7e951b7b56bd72ea002bd9e
SHA512

5749e3d8894800437d6d34adef941113e4f2aa2a69e7e6411e8475316df047ddcb6a3a04328fddf46941b3cb6c295fe0bb826a3b3938c2febc2e9f39383d7cfa
SSDEEP

12288:Hlegle9sDlGlUv3H0p5M1cyZZvkEURxNg8kthU2rhdmX2guZOnb:kg8sB6UD2yZZvkEU7Ng8kthU2rhdmX2s

Score

7^/10

Malware Config

Targets

- Target
  
  7836b2773a60a0bb65d90a68f0fd9b08
- Size
  
  506KB
- MD5
  
  7836b2773a60a0bb65d90a68f0fd9b08
- SHA1
  
  1712372e6927621f61f56c20821351cb3feb629b
- SHA256
  
  f1946240f28890dafbc11dd11f350e00bd8efea0e7e951b7b56bd72ea002bd9e
- SHA512
  
  5749e3d8894800437d6d34adef941113e4f2aa2a69e7e6411e8475316df047ddcb6a3a04328fddf46941b3cb6c295fe0bb826a3b3938c2febc2e9f39383d7cfa
- SSDEEP
  
  12288:Hlegle9sDlGlUv3H0p5M1cyZZvkEURxNg8kthU2rhdmX2guZOnb:kg8sB6UD2yZZvkEU7Ng8kthU2rhdmX2s
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2