e4b9e68ab6a13fcdf94fb608d9c3f31b8537e2cd1019642eb1edad81f2810b10 | Triage

Sharing

General

Target

8d165e44f372aac5ce5cd6b32c4b7837
Size

385KB
Sample

240203-xhfhlafhh5
MD5

8d165e44f372aac5ce5cd6b32c4b7837
SHA1

5ddfffb4fba0fa6186c2a74692ab5fc57825e06d
SHA256

e4b9e68ab6a13fcdf94fb608d9c3f31b8537e2cd1019642eb1edad81f2810b10
SHA512

bfa78e925932afb353cc988fea617e61a78620a73a194a81cd21f4e627c8ff50a0d3ae0f103fd032ed54777992977bd17024e79f690d9079a301d60e49c37329
SSDEEP

6144:C2c4/usmMqowPQneM3ZUu/Hy3j2NkSFT0YAq2yTzhpgvBJ44k9B:CuWCq3PQeM3ZL5f0YhdzkJq9B

Score

7^/10

Malware Config

Targets

- Target
  
  8d165e44f372aac5ce5cd6b32c4b7837
- Size
  
  385KB
- MD5
  
  8d165e44f372aac5ce5cd6b32c4b7837
- SHA1
  
  5ddfffb4fba0fa6186c2a74692ab5fc57825e06d
- SHA256
  
  e4b9e68ab6a13fcdf94fb608d9c3f31b8537e2cd1019642eb1edad81f2810b10
- SHA512
  
  bfa78e925932afb353cc988fea617e61a78620a73a194a81cd21f4e627c8ff50a0d3ae0f103fd032ed54777992977bd17024e79f690d9079a301d60e49c37329
- SSDEEP
  
  6144:C2c4/usmMqowPQneM3ZUu/Hy3j2NkSFT0YAq2yTzhpgvBJ44k9B:CuWCq3PQeM3ZL5f0YhdzkJq9B
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2