6f57f5da03f24882b8d605c03f65b51c1d6399fde420014dfcf458ec0b6f1b06 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab21e8a09417da64e98c4c25c22a2e06
Size

385KB
Sample

240228-gbl4sscd9t
MD5

ab21e8a09417da64e98c4c25c22a2e06
SHA1

dae9ff0c27c741ab65360c2010fa36b5f778330d
SHA256

6f57f5da03f24882b8d605c03f65b51c1d6399fde420014dfcf458ec0b6f1b06
SHA512

b2f0ac8ece330a42679866d84cdefb5e9e068b8a38f52d1c3b2941cca926fcf39707d3bd3d1b1a286bb2fd30c9211fa1f84026770f729faf50ed145d8fcef9fa
SSDEEP

6144:eKVSgwPrFb2L7PVPlTIGcVdAAl/KSvnvIhrxCECebveJwRCGNH1xeLxxH9a5v4nf:e8Or9CBhMvRHEBD5VmTHOgnjNHB

Score

7^/10

Malware Config

Targets

- Target
  
  ab21e8a09417da64e98c4c25c22a2e06
- Size
  
  385KB
- MD5
  
  ab21e8a09417da64e98c4c25c22a2e06
- SHA1
  
  dae9ff0c27c741ab65360c2010fa36b5f778330d
- SHA256
  
  6f57f5da03f24882b8d605c03f65b51c1d6399fde420014dfcf458ec0b6f1b06
- SHA512
  
  b2f0ac8ece330a42679866d84cdefb5e9e068b8a38f52d1c3b2941cca926fcf39707d3bd3d1b1a286bb2fd30c9211fa1f84026770f729faf50ed145d8fcef9fa
- SSDEEP
  
  6144:eKVSgwPrFb2L7PVPlTIGcVdAAl/KSvnvIhrxCECebveJwRCGNH1xeLxxH9a5v4nf:e8Or9CBhMvRHEBD5VmTHOgnjNHB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2