275fd235d0435c0b09dbdc7a2f92fea6782fc63378b41d927af99ced106b7541 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4f85749a13d04cc1e0add998a4cab7a
Size

506KB
Sample

240319-crtflafe6s
MD5

d4f85749a13d04cc1e0add998a4cab7a
SHA1

6c33b397e3d816ca8d34ae9b9a69e7edbfa7657b
SHA256

275fd235d0435c0b09dbdc7a2f92fea6782fc63378b41d927af99ced106b7541
SHA512

cf13b06cc16a90a17f83e7cbc23d3858e4ed4487579ac91e3d8455477c9c50ab299718c68b654774c48d27b72ef0f3dbfc84d8798e94778550edf95b56c19b4f
SSDEEP

12288:d3p7SJXssgKAE3O+Vk80YnXsV7bz/ipuSN1wpbjNxuU:dZ+N1FVv0Yn83jipuO1wpNx3

Score

7^/10

Malware Config

Targets

- Target
  
  d4f85749a13d04cc1e0add998a4cab7a
- Size
  
  506KB
- MD5
  
  d4f85749a13d04cc1e0add998a4cab7a
- SHA1
  
  6c33b397e3d816ca8d34ae9b9a69e7edbfa7657b
- SHA256
  
  275fd235d0435c0b09dbdc7a2f92fea6782fc63378b41d927af99ced106b7541
- SHA512
  
  cf13b06cc16a90a17f83e7cbc23d3858e4ed4487579ac91e3d8455477c9c50ab299718c68b654774c48d27b72ef0f3dbfc84d8798e94778550edf95b56c19b4f
- SSDEEP
  
  12288:d3p7SJXssgKAE3O+Vk80YnXsV7bz/ipuSN1wpbjNxuU:dZ+N1FVv0Yn83jipuO1wpNx3
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2