58f7031844129ab86af0c5831a3142087929b590aeb25856765c90c90170c137 | Triage

Sharing

General

Target

b9d0ae44642a7d5a513ebb0cc1a9161b
Size

506KB
Sample

240307-2chszsff77
MD5

b9d0ae44642a7d5a513ebb0cc1a9161b
SHA1

738a6383936a69621a878cfbd62403cd0f2fc372
SHA256

58f7031844129ab86af0c5831a3142087929b590aeb25856765c90c90170c137
SHA512

28f03ce288d38f54e12de813da2fe63ebd10fdf6535259d1e0e257ccf434705fe9a445cae5e191ce8b782f8b834a165bbefc78a3fb551027562d11403b3d82fc
SSDEEP

12288:AWtdc7LXPC2ialO0Y3F2H9NOZGW1JPSPcexO1jAZuNwKFUFTfr+hK8yg:Nc7L/3Zl0I9YZ980xssNJFUFzyhKg

Score

7^/10

Malware Config

Targets

- Target
  
  b9d0ae44642a7d5a513ebb0cc1a9161b
- Size
  
  506KB
- MD5
  
  b9d0ae44642a7d5a513ebb0cc1a9161b
- SHA1
  
  738a6383936a69621a878cfbd62403cd0f2fc372
- SHA256
  
  58f7031844129ab86af0c5831a3142087929b590aeb25856765c90c90170c137
- SHA512
  
  28f03ce288d38f54e12de813da2fe63ebd10fdf6535259d1e0e257ccf434705fe9a445cae5e191ce8b782f8b834a165bbefc78a3fb551027562d11403b3d82fc
- SSDEEP
  
  12288:AWtdc7LXPC2ialO0Y3F2H9NOZGW1JPSPcexO1jAZuNwKFUFTfr+hK8yg:Nc7L/3Zl0I9YZ980xssNJFUFzyhKg
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2