a7608cf7df11ee9271be3dbee52c5e79485f359e370eb4d4c4af0bf418e66fbf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b86a9dbe48cf1288c731aab5a0a826c5
Size

1000KB
Sample

240307-llr51shd8v
MD5

b86a9dbe48cf1288c731aab5a0a826c5
SHA1

4cea675787dcc2d8b1da02367ab32aaf7bd9c3dc
SHA256

a7608cf7df11ee9271be3dbee52c5e79485f359e370eb4d4c4af0bf418e66fbf
SHA512

d5488cfdf089177849e43210b8e1256caccbc086db249df7b41227c73dbf373829e78cf26260eac2dca078bc948d9169510741c35d0e993b36533b836ce2be6d
SSDEEP

24576:JKAUxyr69Gu4VCa1dY6sk1B+5vMiqt0gj2ed:JTUoW9GumzY52qOL

Score

7^/10

Malware Config

Targets

- Target
  
  b86a9dbe48cf1288c731aab5a0a826c5
- Size
  
  1000KB
- MD5
  
  b86a9dbe48cf1288c731aab5a0a826c5
- SHA1
  
  4cea675787dcc2d8b1da02367ab32aaf7bd9c3dc
- SHA256
  
  a7608cf7df11ee9271be3dbee52c5e79485f359e370eb4d4c4af0bf418e66fbf
- SHA512
  
  d5488cfdf089177849e43210b8e1256caccbc086db249df7b41227c73dbf373829e78cf26260eac2dca078bc948d9169510741c35d0e993b36533b836ce2be6d
- SSDEEP
  
  24576:JKAUxyr69Gu4VCa1dY6sk1B+5vMiqt0gj2ed:JTUoW9GumzY52qOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2