29db59b100972320a44423e791fd590c02560705ed18540a251a8b1633fb15ac | Triage

Sharing

General

Target

8a29c602a4cd58103f12d8d6a46064f1
Size

1000KB
Sample

240202-wjh5faeagq
MD5

8a29c602a4cd58103f12d8d6a46064f1
SHA1

476e4c93229d99dab752af43d033c21241df55f5
SHA256

29db59b100972320a44423e791fd590c02560705ed18540a251a8b1633fb15ac
SHA512

74696a068902c6022e3ef029b27d4cd002e75b92c8995e033bef96081dd586723259e53c1c8dc8e81f94d3d5d177ea753887066513dfb9ba92c08cda9b7ef50f
SSDEEP

24576:lAoWjUt85q8nA4AzlBCo8o1B+5vMiqt0gj2ed:ALnt+bCo8iqOL

Score

7^/10

Malware Config

Targets

- Target
  
  8a29c602a4cd58103f12d8d6a46064f1
- Size
  
  1000KB
- MD5
  
  8a29c602a4cd58103f12d8d6a46064f1
- SHA1
  
  476e4c93229d99dab752af43d033c21241df55f5
- SHA256
  
  29db59b100972320a44423e791fd590c02560705ed18540a251a8b1633fb15ac
- SHA512
  
  74696a068902c6022e3ef029b27d4cd002e75b92c8995e033bef96081dd586723259e53c1c8dc8e81f94d3d5d177ea753887066513dfb9ba92c08cda9b7ef50f
- SSDEEP
  
  24576:lAoWjUt85q8nA4AzlBCo8o1B+5vMiqt0gj2ed:ALnt+bCo8iqOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2