b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f | Triage

Sharing

General

Target

CabDEFC.tmp
Size

70KB
Sample

240805-cnspwstgkj
MD5

49aebf8cbd62d92ac215b2923fb1b9f5
SHA1

1723be06719828dda65ad804298d0431f6aff976
SHA256

b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512

bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
SSDEEP

1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ

Score

8^/10

Malware Config

Targets

- Target
  
  CabDEFC.tmp
- Size
  
  70KB
- MD5
  
  49aebf8cbd62d92ac215b2923fb1b9f5
- SHA1
  
  1723be06719828dda65ad804298d0431f6aff976
- SHA256
  
  b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
- SHA512
  
  bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
- SSDEEP
  
  1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
Score

1^/10
behavioral1 behavioral2
- Target
  
  authroot.stl
- Size
  
  181KB
- MD5
  
  4ea6026cf93ec6338144661bf1202cd1
- SHA1
  
  a1dec9044f750ad887935a01430bf49322fbdcb7
- SHA256
  
  8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
- SHA512
  
  6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b
- SSDEEP
  
  1536:aAZw/J+lCUsTRvsqgCyqWlUDNWdm1wpSru2A0XwjY/z02DTr3rmt6mZ:as2J+qTR0XCy/dmASru2AijbdG
Score

8^/10
- Blocklisted process makes network request
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4