6d0e7a38b111dc793a106a4064e6063c9931c212397ecbefbd8617d8c5cc41cb | Triage

Sharing

General

Target

cd269a865ffeb70667dc356de284c93e
Size

1000KB
Sample

240316-fhegvscd6z
MD5

cd269a865ffeb70667dc356de284c93e
SHA1

5e4c36fecdae279ab69f9b2e6419c961f12fbf5b
SHA256

6d0e7a38b111dc793a106a4064e6063c9931c212397ecbefbd8617d8c5cc41cb
SHA512

5645dd1210821ef6f71b3ef320ada45e9d0ee2b35704333105f131fb8452e7e00b1b51e3b1d9a1a8cc835cc2e0a78636185d988e88dd8920f2282c83ce70d540
SSDEEP

12288:0RFy1m59l+Cp3L6BWsSbBLU/VWMIzbsMqIlECaBwQ2tb5JLrnylUPqt0gHDS7eyw:iy4UBWsgVMiBqIe1B+5vMiqt0gj2ed

Score

7^/10

Malware Config

Targets

- Target
  
  cd269a865ffeb70667dc356de284c93e
- Size
  
  1000KB
- MD5
  
  cd269a865ffeb70667dc356de284c93e
- SHA1
  
  5e4c36fecdae279ab69f9b2e6419c961f12fbf5b
- SHA256
  
  6d0e7a38b111dc793a106a4064e6063c9931c212397ecbefbd8617d8c5cc41cb
- SHA512
  
  5645dd1210821ef6f71b3ef320ada45e9d0ee2b35704333105f131fb8452e7e00b1b51e3b1d9a1a8cc835cc2e0a78636185d988e88dd8920f2282c83ce70d540
- SSDEEP
  
  12288:0RFy1m59l+Cp3L6BWsSbBLU/VWMIzbsMqIlECaBwQ2tb5JLrnylUPqt0gHDS7eyw:iy4UBWsgVMiBqIe1B+5vMiqt0gj2ed
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2