1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184 | Triage

Sharing

General

Target

ctldl.windowsupdate.com
Size

68KB
Sample

240410-gst6qsac41
MD5

29f65ba8e88c063813cc50a4ea544e93
SHA1

05a7040d5c127e68c25d81cc51271ffb8bef3568
SHA256

1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512

e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
SSDEEP

1536:iMveRG6BWC7T2g1wGUa5QUoaIB9ttiFJG+AOQOXl0Usvwr:feRG6BX6gUaHo9tkBHiUewr

Score

8^/10

Malware Config

Targets

- Target
  
  ctldl.windowsupdate.com
- Size
  
  68KB
- MD5
  
  29f65ba8e88c063813cc50a4ea544e93
- SHA1
  
  05a7040d5c127e68c25d81cc51271ffb8bef3568
- SHA256
  
  1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
- SHA512
  
  e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
- SSDEEP
  
  1536:iMveRG6BWC7T2g1wGUa5QUoaIB9ttiFJG+AOQOXl0Usvwr:feRG6BX6gUaHo9tkBHiUewr
Score

1^/10
behavioral1 behavioral2
- Target
  
  authroot.stl
- Size
  
  177KB
- MD5
  
  435a9ac180383f9fa094131b173a2f7b
- SHA1
  
  76944ea657a9db94f9a4bef38f88c46ed4166983
- SHA256
  
  67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
- SHA512
  
  1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a
- SSDEEP
  
  1536:fAo/J+lCUsTRvsqgCyqWlUDNWdm1wpSru2A0XwjY/z02DTr3rmt6mJ:f/J+qTR0XCy/dmASru2Aijbdq
Score

8^/10
- Blocklisted process makes network request
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4