4bf3244cbdc0faa388aa79d17ff7dc191b80159a0d216f768033968325b08dc8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd7fae571e90e8026e28522cd2862534
Size

385KB
Sample

240310-dhvsqsag37
MD5

bd7fae571e90e8026e28522cd2862534
SHA1

6c3fa728799028c24e1ca62ac8de88ba3749df7c
SHA256

4bf3244cbdc0faa388aa79d17ff7dc191b80159a0d216f768033968325b08dc8
SHA512

873d4dcacfa85de54d7ae6eea6d59ce5f328d016d88695096cb0bc86f62eedf8fa5439fa3db753bb787e8a14177edb4aabe98e7e8aeea1049b00e28320084ecc
SSDEEP

12288:X9yokqkTMKedJPycKRXOyl6Qw4fR7xGYoqEWB:NyokqkTz+IZXOysIB

Score

7^/10

Malware Config

Targets

- Target
  
  bd7fae571e90e8026e28522cd2862534
- Size
  
  385KB
- MD5
  
  bd7fae571e90e8026e28522cd2862534
- SHA1
  
  6c3fa728799028c24e1ca62ac8de88ba3749df7c
- SHA256
  
  4bf3244cbdc0faa388aa79d17ff7dc191b80159a0d216f768033968325b08dc8
- SHA512
  
  873d4dcacfa85de54d7ae6eea6d59ce5f328d016d88695096cb0bc86f62eedf8fa5439fa3db753bb787e8a14177edb4aabe98e7e8aeea1049b00e28320084ecc
- SSDEEP
  
  12288:X9yokqkTMKedJPycKRXOyl6Qw4fR7xGYoqEWB:NyokqkTz+IZXOysIB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2