abeae7d91dba004a3aac08f604a7fa01af184a433c2bc3e5c66aacb02801f5af | Triage

Sharing

General

Target

bf9da40410b1c5d335d5eefc828f21db
Size

506KB
Sample

240311-c2187aac84
MD5

bf9da40410b1c5d335d5eefc828f21db
SHA1

049c0aafbe0e0c5f04b6f85c0c8d0be164c925e0
SHA256

abeae7d91dba004a3aac08f604a7fa01af184a433c2bc3e5c66aacb02801f5af
SHA512

82b87c47f3aa819e99f3587abfa503059e110c3ae083edd9dd90f9f93b26ca12a4606c8a8fbc83a1bb43dac90e67afe30a57d7f0200da7ea64c3bd7cb7a12e5b
SSDEEP

12288:GnDfQ6mmrbJh2Ci9rbqrALPwnaCtk/Y2Eq:GnDYmrbJhfMrbqULPBCSY/q

Score

7^/10

Malware Config

Targets

- Target
  
  bf9da40410b1c5d335d5eefc828f21db
- Size
  
  506KB
- MD5
  
  bf9da40410b1c5d335d5eefc828f21db
- SHA1
  
  049c0aafbe0e0c5f04b6f85c0c8d0be164c925e0
- SHA256
  
  abeae7d91dba004a3aac08f604a7fa01af184a433c2bc3e5c66aacb02801f5af
- SHA512
  
  82b87c47f3aa819e99f3587abfa503059e110c3ae083edd9dd90f9f93b26ca12a4606c8a8fbc83a1bb43dac90e67afe30a57d7f0200da7ea64c3bd7cb7a12e5b
- SSDEEP
  
  12288:GnDfQ6mmrbJh2Ci9rbqrALPwnaCtk/Y2Eq:GnDYmrbJhfMrbqULPBCSY/q
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2