0e076d669d8e680b9fb50e6bd604865ac834c8760e85559e56cbfe739adbe6e5 | Triage

Sharing

General

Target

c176bf72e53fa35a888f6c5f174c204c
Size

385KB
Sample

240311-yn95tseg89
MD5

c176bf72e53fa35a888f6c5f174c204c
SHA1

861c0e508133c08334689d810beb20d7870577bd
SHA256

0e076d669d8e680b9fb50e6bd604865ac834c8760e85559e56cbfe739adbe6e5
SHA512

6d3621c706d0008567eb04fafebb845cfce1c48ce1459f1354a9974d00265ae1c7077bf49c874cdc5669d799a8a500ed02a624e28ce024e327f581d88a864fe2
SSDEEP

12288:qKSr7moITrWEbU4emHIRjsRvlIiJANHFKgLB:qtQaaU43ss2cGFKgLB

Score

7^/10

Malware Config

Targets

- Target
  
  c176bf72e53fa35a888f6c5f174c204c
- Size
  
  385KB
- MD5
  
  c176bf72e53fa35a888f6c5f174c204c
- SHA1
  
  861c0e508133c08334689d810beb20d7870577bd
- SHA256
  
  0e076d669d8e680b9fb50e6bd604865ac834c8760e85559e56cbfe739adbe6e5
- SHA512
  
  6d3621c706d0008567eb04fafebb845cfce1c48ce1459f1354a9974d00265ae1c7077bf49c874cdc5669d799a8a500ed02a624e28ce024e327f581d88a864fe2
- SSDEEP
  
  12288:qKSr7moITrWEbU4emHIRjsRvlIiJANHFKgLB:qtQaaU43ss2cGFKgLB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2