0ca1e7720246580da172fae6377d94b41977600ff3accf828e97d955a526223d | Triage

Sharing

General

Target

bc9b9093489f6a6292c8edfcaf0908ab
Size

506KB
Sample

240309-x5q8lsgf9t
MD5

bc9b9093489f6a6292c8edfcaf0908ab
SHA1

62a2766a15240b35468a9bb2a07c038cabd79211
SHA256

0ca1e7720246580da172fae6377d94b41977600ff3accf828e97d955a526223d
SHA512

86c55a56bfde54c8ad198f364820f00c229472d29408b3c236c90fb91efdfffff86c7ade75b5c7b872888cf401dbaf216ae49d11c068d0b8379d28468b8a8681
SSDEEP

6144:YY2XMWX6Oy40yb+umyyzVZnNEawns1KPmcoLP1Q8wp492nwK1FZ5kFp5aRNlK5:YjMWX6O10ypmHZNELsYAHJ98PUaRvK5

Score

7^/10

Malware Config

Targets

- Target
  
  bc9b9093489f6a6292c8edfcaf0908ab
- Size
  
  506KB
- MD5
  
  bc9b9093489f6a6292c8edfcaf0908ab
- SHA1
  
  62a2766a15240b35468a9bb2a07c038cabd79211
- SHA256
  
  0ca1e7720246580da172fae6377d94b41977600ff3accf828e97d955a526223d
- SHA512
  
  86c55a56bfde54c8ad198f364820f00c229472d29408b3c236c90fb91efdfffff86c7ade75b5c7b872888cf401dbaf216ae49d11c068d0b8379d28468b8a8681
- SSDEEP
  
  6144:YY2XMWX6Oy40yb+umyyzVZnNEawns1KPmcoLP1Q8wp492nwK1FZ5kFp5aRNlK5:YjMWX6O10ypmHZNELsYAHJ98PUaRvK5
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2