860605fe1a3a5f9c3c4aeda438dc18c6040613e336f1810b60b8507b47f0c24c | Triage

Sharing

General

Target

cdf3148a49a4b78342ae9e406b73500a
Size

1000KB
Sample

240316-nk2n6sca99
MD5

cdf3148a49a4b78342ae9e406b73500a
SHA1

0a9901077e2b8992cde8afc6b37a6e6820f32549
SHA256

860605fe1a3a5f9c3c4aeda438dc18c6040613e336f1810b60b8507b47f0c24c
SHA512

a8452aabe0a77a73e6efb7c2a2fc1e82d6389581717f776918c25a7bd5d97435293a1de7ba16e49715d4fbd4253cfed9473d0c0e098ce17f7670903f6f05e445
SSDEEP

24576:H2puuQrIzcodDtOwJh6O+T6k21B+5vMiqt0gj2ed:HGakzNh5/u63qOL

Score

7^/10

Malware Config

Targets

- Target
  
  cdf3148a49a4b78342ae9e406b73500a
- Size
  
  1000KB
- MD5
  
  cdf3148a49a4b78342ae9e406b73500a
- SHA1
  
  0a9901077e2b8992cde8afc6b37a6e6820f32549
- SHA256
  
  860605fe1a3a5f9c3c4aeda438dc18c6040613e336f1810b60b8507b47f0c24c
- SHA512
  
  a8452aabe0a77a73e6efb7c2a2fc1e82d6389581717f776918c25a7bd5d97435293a1de7ba16e49715d4fbd4253cfed9473d0c0e098ce17f7670903f6f05e445
- SSDEEP
  
  24576:H2puuQrIzcodDtOwJh6O+T6k21B+5vMiqt0gj2ed:HGakzNh5/u63qOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2