7a95e75e293c5868d6838b1474f0050a404e11b988719f83251bd5e5a4c211a4 | Triage

Sharing

General

Target

9c2047bf583f8b8f459c5ba48612b76f
Size

1000KB
Sample

240214-ttzttsgc59
MD5

9c2047bf583f8b8f459c5ba48612b76f
SHA1

411db7aa0eda7e2ab224646e7ca0e9503b2022a6
SHA256

7a95e75e293c5868d6838b1474f0050a404e11b988719f83251bd5e5a4c211a4
SHA512

a49555f54da2fa578f290b45cee9911b27d2438ce9386a8830b6abba4143d83bbf28d561275cb9407f0c2e75a0a2d33d8c0b9632a73b7720250f0b8eb87227b8
SSDEEP

24576:2ryis7qB4K2W4rYe6FBkT1B+5vMiqt0gj2ed:cItMe6FabqOL

Score

7^/10

Malware Config

Targets

- Target
  
  9c2047bf583f8b8f459c5ba48612b76f
- Size
  
  1000KB
- MD5
  
  9c2047bf583f8b8f459c5ba48612b76f
- SHA1
  
  411db7aa0eda7e2ab224646e7ca0e9503b2022a6
- SHA256
  
  7a95e75e293c5868d6838b1474f0050a404e11b988719f83251bd5e5a4c211a4
- SHA512
  
  a49555f54da2fa578f290b45cee9911b27d2438ce9386a8830b6abba4143d83bbf28d561275cb9407f0c2e75a0a2d33d8c0b9632a73b7720250f0b8eb87227b8
- SSDEEP
  
  24576:2ryis7qB4K2W4rYe6FBkT1B+5vMiqt0gj2ed:cItMe6FabqOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2