781cff1a6223e1bf04914e48a9a1248ca866e2ed6575feaaf46dec33b828d984 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c992dd0192cf497767506b408df5ab44
Size

1000KB
Sample

240314-zhcstaef8x
MD5

c992dd0192cf497767506b408df5ab44
SHA1

5fe5adc2aa30c5cd97cb596fa7bec9e1055858eb
SHA256

781cff1a6223e1bf04914e48a9a1248ca866e2ed6575feaaf46dec33b828d984
SHA512

e8b7dabed3c8dcae30df0b2530daa4f34576ddeb04e276782160169239b1c65c875d0b8a247b2888400430689f98311d2d00a4a373fd01acb4c64fcffc31decc
SSDEEP

24576:hH7OGi8eZTcomUTtRMZHw1B+5vMiqt0gj2ed:5+TcbUTtu6qOL

Score

7^/10

Malware Config

Targets

- Target
  
  c992dd0192cf497767506b408df5ab44
- Size
  
  1000KB
- MD5
  
  c992dd0192cf497767506b408df5ab44
- SHA1
  
  5fe5adc2aa30c5cd97cb596fa7bec9e1055858eb
- SHA256
  
  781cff1a6223e1bf04914e48a9a1248ca866e2ed6575feaaf46dec33b828d984
- SHA512
  
  e8b7dabed3c8dcae30df0b2530daa4f34576ddeb04e276782160169239b1c65c875d0b8a247b2888400430689f98311d2d00a4a373fd01acb4c64fcffc31decc
- SSDEEP
  
  24576:hH7OGi8eZTcomUTtRMZHw1B+5vMiqt0gj2ed:5+TcbUTtu6qOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2