c91fbb1ea270116e5175533429dcc1413d441924a98f05076be21cdeacaa330d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc914a4c20b533fbaedd4cf65ee938f2
Size

1000KB
Sample

240315-3vepqagc26
MD5

cc914a4c20b533fbaedd4cf65ee938f2
SHA1

cd07e88a9348498d14b219017bdb71ad619772bf
SHA256

c91fbb1ea270116e5175533429dcc1413d441924a98f05076be21cdeacaa330d
SHA512

00de7560916caa94f5f85899b08863aa8084b6a91cf42029b6278bc3c6c6e6aeb5c046e1fc4141b1cd77437628a03b2c8bd8a4f669853ff37a5abd792edb27f1
SSDEEP

24576:Ch30KGx4nTvsq/7mELf1B+5vMiqt0gj2ed:C7GGTkqTl/qOL

Score

7^/10

Malware Config

Targets

- Target
  
  cc914a4c20b533fbaedd4cf65ee938f2
- Size
  
  1000KB
- MD5
  
  cc914a4c20b533fbaedd4cf65ee938f2
- SHA1
  
  cd07e88a9348498d14b219017bdb71ad619772bf
- SHA256
  
  c91fbb1ea270116e5175533429dcc1413d441924a98f05076be21cdeacaa330d
- SHA512
  
  00de7560916caa94f5f85899b08863aa8084b6a91cf42029b6278bc3c6c6e6aeb5c046e1fc4141b1cd77437628a03b2c8bd8a4f669853ff37a5abd792edb27f1
- SSDEEP
  
  24576:Ch30KGx4nTvsq/7mELf1B+5vMiqt0gj2ed:C7GGTkqTl/qOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2