972ffdbdf59ce6c93d15414113a66eeeddff3a89beb09b18c70f2d8e6149eb02 | Triage

Sharing

General

Target

ac24a89ec6fd317386e0da3289d60b40
Size

1000KB
Sample

240228-r57byaeb51
MD5

ac24a89ec6fd317386e0da3289d60b40
SHA1

5afbac428ef988ab896b8f9816dafb89bfc6b3da
SHA256

972ffdbdf59ce6c93d15414113a66eeeddff3a89beb09b18c70f2d8e6149eb02
SHA512

b91799c9fe6192ab0e69c4d3b237f0818a3f3bb75afd06436442d05f5833347e3c3291e11d4ae90c0583a1831e0651198f65fa620168bda280a8fbbe9f7425d5
SSDEEP

24576:vHXsnCldiQ7rSme98481B+5vMiqt0gj2ed:dld9qneqOL

Score

7^/10

Malware Config

Targets

- Target
  
  ac24a89ec6fd317386e0da3289d60b40
- Size
  
  1000KB
- MD5
  
  ac24a89ec6fd317386e0da3289d60b40
- SHA1
  
  5afbac428ef988ab896b8f9816dafb89bfc6b3da
- SHA256
  
  972ffdbdf59ce6c93d15414113a66eeeddff3a89beb09b18c70f2d8e6149eb02
- SHA512
  
  b91799c9fe6192ab0e69c4d3b237f0818a3f3bb75afd06436442d05f5833347e3c3291e11d4ae90c0583a1831e0651198f65fa620168bda280a8fbbe9f7425d5
- SSDEEP
  
  24576:vHXsnCldiQ7rSme98481B+5vMiqt0gj2ed:dld9qneqOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2