26e6ddeef230ea75a15f3ace23f3f8ce4853c27fa561fd2be880da70aaba06eb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d30aea90227baafb8e479e2a4fa0a4f
Size

506KB
Sample

240128-p6l2aadaap
MD5

7d30aea90227baafb8e479e2a4fa0a4f
SHA1

8bfad4e341e221c5d1650a7866bcb537790f43f1
SHA256

26e6ddeef230ea75a15f3ace23f3f8ce4853c27fa561fd2be880da70aaba06eb
SHA512

7b8e099b630e49e6e8df5251f079313a99fa709346941290afda05a67b30f3e243281ab4e0519cbf76752bb21d155c2bc6faa7a7f19710d0068b5f5d1c68bf5f
SSDEEP

12288:RiN0K5xv0Jed+KzL6a7SskhXOVrSWMwexkP6To3ld2:RiN0K5V0JozGa7Sskh8uWMwQkSMX2

Score

7^/10

Malware Config

Targets

- Target
  
  7d30aea90227baafb8e479e2a4fa0a4f
- Size
  
  506KB
- MD5
  
  7d30aea90227baafb8e479e2a4fa0a4f
- SHA1
  
  8bfad4e341e221c5d1650a7866bcb537790f43f1
- SHA256
  
  26e6ddeef230ea75a15f3ace23f3f8ce4853c27fa561fd2be880da70aaba06eb
- SHA512
  
  7b8e099b630e49e6e8df5251f079313a99fa709346941290afda05a67b30f3e243281ab4e0519cbf76752bb21d155c2bc6faa7a7f19710d0068b5f5d1c68bf5f
- SSDEEP
  
  12288:RiN0K5xv0Jed+KzL6a7SskhXOVrSWMwexkP6To3ld2:RiN0K5V0JozGa7Sskh8uWMwQkSMX2
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2