38674c9a736d8da92a54e4d0469993f8b80feb20089e7f27154d09eb46c31302 | Triage

Sharing

General

Target

c910e8d06e2156f261112caf7b553c1f
Size

1000KB
Sample

240314-ttj4dagg4w
MD5

c910e8d06e2156f261112caf7b553c1f
SHA1

fb83509c979fd252b1c8bbf6de22bd44d612bbd0
SHA256

38674c9a736d8da92a54e4d0469993f8b80feb20089e7f27154d09eb46c31302
SHA512

5e5cf6e9b5b5dc581999e6d3b49967f1a600102ea497cf9904b3e98e34ab411725bb65ca15b6d4e47f2b4a1ad39eb64698d1561c5430b18d55a1e04f3ab297e8
SSDEEP

12288:V6nfac1K2si6QDNuZFRtFBB8HTV8nuzrFi3ECaBwQ2tb5JLrnylUPqt0gHDS7eyw:mfaWTsiv0Zt4guFiU1B+5vMiqt0gj2ed

Score

7^/10

Malware Config

Targets

- Target
  
  c910e8d06e2156f261112caf7b553c1f
- Size
  
  1000KB
- MD5
  
  c910e8d06e2156f261112caf7b553c1f
- SHA1
  
  fb83509c979fd252b1c8bbf6de22bd44d612bbd0
- SHA256
  
  38674c9a736d8da92a54e4d0469993f8b80feb20089e7f27154d09eb46c31302
- SHA512
  
  5e5cf6e9b5b5dc581999e6d3b49967f1a600102ea497cf9904b3e98e34ab411725bb65ca15b6d4e47f2b4a1ad39eb64698d1561c5430b18d55a1e04f3ab297e8
- SSDEEP
  
  12288:V6nfac1K2si6QDNuZFRtFBB8HTV8nuzrFi3ECaBwQ2tb5JLrnylUPqt0gHDS7eyw:mfaWTsiv0Zt4guFiU1B+5vMiqt0gj2ed
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2