008f6ebfaf206b207cfd1b82e76183e148d750684efa12a41320d19bf80f4a19 | Triage

Sharing

General

Target

d4bc76778aa14165d048727072cb17f3
Size

385KB
Sample

240319-amcwyacd29
MD5

d4bc76778aa14165d048727072cb17f3
SHA1

eccefdff3e33678ddf5a4868202256d2c01c3bbe
SHA256

008f6ebfaf206b207cfd1b82e76183e148d750684efa12a41320d19bf80f4a19
SHA512

de350d834eb4855ec1db9113ee5dae20735b35bbab08cb3b1b8ad91701c8db33b11d1f3909ec6436c2214bd6393e20cb3c27e735bce28367f5ebf91811ac8f42
SSDEEP

12288:X0KnVfTyE2J2Bgqlehqanwz21qCFpGkiSI4BVkoB:EKV7y1J2Cqlgq+z4CHZiysoB

Score

7^/10

Malware Config

Targets

- Target
  
  d4bc76778aa14165d048727072cb17f3
- Size
  
  385KB
- MD5
  
  d4bc76778aa14165d048727072cb17f3
- SHA1
  
  eccefdff3e33678ddf5a4868202256d2c01c3bbe
- SHA256
  
  008f6ebfaf206b207cfd1b82e76183e148d750684efa12a41320d19bf80f4a19
- SHA512
  
  de350d834eb4855ec1db9113ee5dae20735b35bbab08cb3b1b8ad91701c8db33b11d1f3909ec6436c2214bd6393e20cb3c27e735bce28367f5ebf91811ac8f42
- SSDEEP
  
  12288:X0KnVfTyE2J2Bgqlehqanwz21qCFpGkiSI4BVkoB:EKV7y1J2Cqlgq+z4CHZiysoB
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2