2bee039cf9fa744f88536df96ac14434e0f0c1fa7f745339b7aa0430f49b505c | Triage

Sharing

General

Target

ada8b0623fc93b24a8af0f0c2258ee70
Size

385KB
Sample

240229-es647adb62
MD5

ada8b0623fc93b24a8af0f0c2258ee70
SHA1

9d4a571e33139de9f4c7f481cef86995e402513d
SHA256

2bee039cf9fa744f88536df96ac14434e0f0c1fa7f745339b7aa0430f49b505c
SHA512

c778b673a5ffbcd7a6bdd0c8d4c8166c0a0f7026d156592ae4659c9f94c1639f11a810efdeb451d52b6b3b6bb56b0ec3f4d33070643c92d2a8b036b283162f97
SSDEEP

6144:Yx+WKHHVAP80NuB25ZgjE5tglxn40+pB/Pdh6BCPr5ozj4BTLLfB:yKnVAUEvZgjEzUxne/Fh6B6rZB3LfB

Score

7^/10

Malware Config

Targets

- Target
  
  ada8b0623fc93b24a8af0f0c2258ee70
- Size
  
  385KB
- MD5
  
  ada8b0623fc93b24a8af0f0c2258ee70
- SHA1
  
  9d4a571e33139de9f4c7f481cef86995e402513d
- SHA256
  
  2bee039cf9fa744f88536df96ac14434e0f0c1fa7f745339b7aa0430f49b505c
- SHA512
  
  c778b673a5ffbcd7a6bdd0c8d4c8166c0a0f7026d156592ae4659c9f94c1639f11a810efdeb451d52b6b3b6bb56b0ec3f4d33070643c92d2a8b036b283162f97
- SSDEEP
  
  6144:Yx+WKHHVAP80NuB25ZgjE5tglxn40+pB/Pdh6BCPr5ozj4BTLLfB:yKnVAUEvZgjEzUxne/Fh6B6rZB3LfB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2