observer | 24bb4fc117aa57fd170e878263973a392d094c94d3a5f651fad7528d5d73b58a | Triage

Sharing

General

Target

24bb4fc117aa57fd170e878263973a392d094c94d3a5f651fad7528d5d73b58a.exe
Size

250KB
Sample

240322-b8a5xagg7w
MD5

2d2b66d90495c1236f2e557172bf0f1c
SHA1

a06d203ae9cbe26a3c2e389f1c361ac49ef54c08
SHA256

24bb4fc117aa57fd170e878263973a392d094c94d3a5f651fad7528d5d73b58a
SHA512

6c41ed49223001453c9e014fb16ca8f1ac8345f181fc92c6abefee8118a316133f74d37e67ca2fff2c1a1859b8aea95207b22b2515573875bb95a4af9a52bcce
SSDEEP

3072:5LPEI6w9gdroG/X2jOVYHfWfo/CTHOU9Kp4O58eJZygmOVYOdqTnHLnwPclIFaFT:VbExY/6uMTrO58K9F8TnHKUoGcy

Score

10^/10

observer

Malware Config

Extracted

Family

observer

C2

http://5.42.66.25:3000

Targets

- Target
  
  24bb4fc117aa57fd170e878263973a392d094c94d3a5f651fad7528d5d73b58a.exe
- Size
  
  250KB
- MD5
  
  2d2b66d90495c1236f2e557172bf0f1c
- SHA1
  
  a06d203ae9cbe26a3c2e389f1c361ac49ef54c08
- SHA256
  
  24bb4fc117aa57fd170e878263973a392d094c94d3a5f651fad7528d5d73b58a
- SHA512
  
  6c41ed49223001453c9e014fb16ca8f1ac8345f181fc92c6abefee8118a316133f74d37e67ca2fff2c1a1859b8aea95207b22b2515573875bb95a4af9a52bcce
- SSDEEP
  
  3072:5LPEI6w9gdroG/X2jOVYHfWfo/CTHOU9Kp4O58eJZygmOVYOdqTnHLnwPclIFaFT:VbExY/6uMTrO58K9F8TnHKUoGcy
Score

1^/10
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2