4fd435d4ec96e238345522d35d36b7dc30336052655e50f386806b544d0fcfad | Triage

Sharing

General

Target

df59194ca75dbba12d1c3a76bf604444
Size

1000KB
Sample

240326-rfaaxaeh5y
MD5

df59194ca75dbba12d1c3a76bf604444
SHA1

7395790a2f07b9294d465c7726cbd4529b8496ab
SHA256

4fd435d4ec96e238345522d35d36b7dc30336052655e50f386806b544d0fcfad
SHA512

b90af7140a7e3cc97995214bb58623077039725c536d0917ef326fba0395a9efddce81ac7ebb7289f744acc434829059c3d7007df32224a8fbe71cb28cf196d3
SSDEEP

24576:Hbcql9ZRZHReZwfg3wB01B+5vMiqt0gj2ed:HY+nZxKwo3wmqOL

Score

7^/10

Malware Config

Targets

- Target
  
  df59194ca75dbba12d1c3a76bf604444
- Size
  
  1000KB
- MD5
  
  df59194ca75dbba12d1c3a76bf604444
- SHA1
  
  7395790a2f07b9294d465c7726cbd4529b8496ab
- SHA256
  
  4fd435d4ec96e238345522d35d36b7dc30336052655e50f386806b544d0fcfad
- SHA512
  
  b90af7140a7e3cc97995214bb58623077039725c536d0917ef326fba0395a9efddce81ac7ebb7289f744acc434829059c3d7007df32224a8fbe71cb28cf196d3
- SSDEEP
  
  24576:Hbcql9ZRZHReZwfg3wB01B+5vMiqt0gj2ed:HY+nZxKwo3wmqOL
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2