58cb7aa7dd5b92700bb0fab75f2b96a853d790b5a13aac7a853a83219ebee42a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3a28aea1f9a125e87d4e487c06d9881
Size

385KB
Sample

240312-r6lfvsbc9t
MD5

c3a28aea1f9a125e87d4e487c06d9881
SHA1

afa3f4fb95110a3bb9aa25c4dd57df10a5827d0c
SHA256

58cb7aa7dd5b92700bb0fab75f2b96a853d790b5a13aac7a853a83219ebee42a
SHA512

2f19c72cf48c332e3f620253e882f6263c2e7d1c01845f98099a16b50a8fc11cf9beb9e227d2e1e0727007f40e0327780e6e55a26a86bde677f992d1e990f0b7
SSDEEP

6144:UmziQVmbra3bAeeASSESPJTTVdzkjPoqscM+udBAHZ/1EvPI6sv898uYI8qB:UmziQQr2BbSBYdTjWAGfE/r5B

Score

7^/10

Malware Config

Targets

- Target
  
  c3a28aea1f9a125e87d4e487c06d9881
- Size
  
  385KB
- MD5
  
  c3a28aea1f9a125e87d4e487c06d9881
- SHA1
  
  afa3f4fb95110a3bb9aa25c4dd57df10a5827d0c
- SHA256
  
  58cb7aa7dd5b92700bb0fab75f2b96a853d790b5a13aac7a853a83219ebee42a
- SHA512
  
  2f19c72cf48c332e3f620253e882f6263c2e7d1c01845f98099a16b50a8fc11cf9beb9e227d2e1e0727007f40e0327780e6e55a26a86bde677f992d1e990f0b7
- SSDEEP
  
  6144:UmziQVmbra3bAeeASSESPJTTVdzkjPoqscM+udBAHZ/1EvPI6sv898uYI8qB:UmziQQr2BbSBYdTjWAGfE/r5B
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2