fafaeb1f3404913c76ceb3b8171d457f18d6285f8c1e639d4566ffbddc8670bc | Triage

Sharing

General

Target

bd3eb2be43c9f77971825eaeab6a8393
Size

771KB
Sample

240310-bbpl2agc4v
MD5

bd3eb2be43c9f77971825eaeab6a8393
SHA1

0c3800cdff56257d175b7ca80d8ede63ae225cb5
SHA256

fafaeb1f3404913c76ceb3b8171d457f18d6285f8c1e639d4566ffbddc8670bc
SHA512

039d61ab0b85ab53a05ec22c5f86de51354dd30d4b5fbe7a8d0b06c3159315ae8634b6c33b05e5cfec10bf23da748c8dac383cbc8472d699deb4e464795446a3
SSDEEP

12288:DJUMxYM6p3lOm74qGllyPzJLniYZ/C9OFEIif0F6rerfrEhU8zFVMB:DKM5o3gAevytvZWqEIz6qrfiTMB

Score

7^/10

Malware Config

Targets

- Target
  
  bd3eb2be43c9f77971825eaeab6a8393
- Size
  
  771KB
- MD5
  
  bd3eb2be43c9f77971825eaeab6a8393
- SHA1
  
  0c3800cdff56257d175b7ca80d8ede63ae225cb5
- SHA256
  
  fafaeb1f3404913c76ceb3b8171d457f18d6285f8c1e639d4566ffbddc8670bc
- SHA512
  
  039d61ab0b85ab53a05ec22c5f86de51354dd30d4b5fbe7a8d0b06c3159315ae8634b6c33b05e5cfec10bf23da748c8dac383cbc8472d699deb4e464795446a3
- SSDEEP
  
  12288:DJUMxYM6p3lOm74qGllyPzJLniYZ/C9OFEIif0F6rerfrEhU8zFVMB:DKM5o3gAevytvZWqEIz6qrfiTMB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2