9f7a7caa3e0ff01fba056e6a5951009725aa70efe57f83870660b16e8ebf83bc | Triage

Sharing

General

Target

871a4c8b121956aed31636ff008c5103
Size

385KB
Sample

240201-rnns9shcbj
MD5

871a4c8b121956aed31636ff008c5103
SHA1

b2897972a61027d9d4325b52b369cb61e82b721b
SHA256

9f7a7caa3e0ff01fba056e6a5951009725aa70efe57f83870660b16e8ebf83bc
SHA512

a9d7f74a95e01c9b8c165367119e1470d5ab18995b7ef862f25181a731fcffdf66afcf310ddb6a44c1fb294c842bc9721ece2c551e5e5cb65f279b3b46d89e5a
SSDEEP

12288:N2pnhTg2Q+Aypukh2ZQ3LWRVb1KJ5nbcc70B:knTg2kypukh4yWzT/B

Score

7^/10

Malware Config

Targets

- Target
  
  871a4c8b121956aed31636ff008c5103
- Size
  
  385KB
- MD5
  
  871a4c8b121956aed31636ff008c5103
- SHA1
  
  b2897972a61027d9d4325b52b369cb61e82b721b
- SHA256
  
  9f7a7caa3e0ff01fba056e6a5951009725aa70efe57f83870660b16e8ebf83bc
- SHA512
  
  a9d7f74a95e01c9b8c165367119e1470d5ab18995b7ef862f25181a731fcffdf66afcf310ddb6a44c1fb294c842bc9721ece2c551e5e5cb65f279b3b46d89e5a
- SSDEEP
  
  12288:N2pnhTg2Q+Aypukh2ZQ3LWRVb1KJ5nbcc70B:knTg2kypukh4yWzT/B
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2