9767a87c9698486ded37c1264b295b1a13e4870f445705e8bbc6ae21047abc64 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a24bfe4919c112e965b4b01c32ab5338
Size

1000KB
Sample

240224-vkx5baha63
MD5

a24bfe4919c112e965b4b01c32ab5338
SHA1

41cbb942263a81e93cc0e006c613c2b96c99c623
SHA256

9767a87c9698486ded37c1264b295b1a13e4870f445705e8bbc6ae21047abc64
SHA512

cd2e0f09f9674e08fb0a01a46e2f23a6b732a2029fc702769b7ccefbaf2827a7ac1a3fc68ca1999663ed109a75371469a5072470d2864cf6faf8857b7acbf791
SSDEEP

24576:IyUfW/RoJnTKL5l3Cx7ShmeCwkevwyLqUHGN1B+5vMiqt0gj2ed:Iyv/R/X2hqOL

Score

7^/10

Malware Config

Targets

- Target
  
  a24bfe4919c112e965b4b01c32ab5338
- Size
  
  1000KB
- MD5
  
  a24bfe4919c112e965b4b01c32ab5338
- SHA1
  
  41cbb942263a81e93cc0e006c613c2b96c99c623
- SHA256
  
  9767a87c9698486ded37c1264b295b1a13e4870f445705e8bbc6ae21047abc64
- SHA512
  
  cd2e0f09f9674e08fb0a01a46e2f23a6b732a2029fc702769b7ccefbaf2827a7ac1a3fc68ca1999663ed109a75371469a5072470d2864cf6faf8857b7acbf791
- SSDEEP
  
  24576:IyUfW/RoJnTKL5l3Cx7ShmeCwkevwyLqUHGN1B+5vMiqt0gj2ed:Iyv/R/X2hqOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2