2a869c7faebdc694fb0a6e2f4c1438de6d45057de7d2aba6c660b82924892868 | Triage

Sharing

General

Target

97601a3c40f593b22939d0258467fb61
Size

907KB
Sample

240212-rs9arshf72
MD5

97601a3c40f593b22939d0258467fb61
SHA1

8c208cb626b946f01358cf47d4ad6b34e6dbf596
SHA256

2a869c7faebdc694fb0a6e2f4c1438de6d45057de7d2aba6c660b82924892868
SHA512

43e95b326d3648eaf80667e25d16e904b3be77fcdcf0b58b521346ad5e2494b2fc531d4b87a0c98b0062cc9680f12ed27f259fbbbf556941660f3997bffcaafc
SSDEEP

24576:8gvuZBNF8fAg4GMDbvvkgo1xLFhrZSoab0eNCa/ZS1:8gvWFUc1bvvBexLFybIgS

Score

7^/10

Malware Config

Targets

- Target
  
  97601a3c40f593b22939d0258467fb61
- Size
  
  907KB
- MD5
  
  97601a3c40f593b22939d0258467fb61
- SHA1
  
  8c208cb626b946f01358cf47d4ad6b34e6dbf596
- SHA256
  
  2a869c7faebdc694fb0a6e2f4c1438de6d45057de7d2aba6c660b82924892868
- SHA512
  
  43e95b326d3648eaf80667e25d16e904b3be77fcdcf0b58b521346ad5e2494b2fc531d4b87a0c98b0062cc9680f12ed27f259fbbbf556941660f3997bffcaafc
- SSDEEP
  
  24576:8gvuZBNF8fAg4GMDbvvkgo1xLFhrZSoab0eNCa/ZS1:8gvWFUc1bvvBexLFybIgS
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2