212c00916c1969a080b1475568d3acb77da5f471e449e1a3518ec0bef3e90736 | Triage

Resubmissions

05-08-2024 07:11

240805-hz14aszbrl 10

05-08-2024 07:09

240805-hy7vfstdla 3

05-08-2024 07:05

240805-hwzfastcpg 6

05-08-2024 07:04

240805-hv7qaatcnf 3

05-08-2024 06:55

240805-hqavratbne 1

05-08-2024 06:55

240805-hp5nqszalm 1

05-08-2024 06:54

240805-hpqvkstbmd 1

Sharing

General

Target

Screenshot_20240729_011531_TikTok.jpg
Size

24KB
Sample

240805-hwzfastcpg
MD5

20bf28be2328c3fc71cc890f85c6c427
SHA1

99338e93d92c6852cb5ca9ff5dd3ef74da4543ce
SHA256

212c00916c1969a080b1475568d3acb77da5f471e449e1a3518ec0bef3e90736
SHA512

d7d1a28417abceb7689f89adbde87cacaa1298669d9a32fcf22bc1c58f6ad08e5891205f1e2782885745c15fb3b3dc037b39246189fafe911845fdd4a215d944
SSDEEP

768:sjbMqMTFiBTizxZv1gHnvwHTIjvQZ4Bs6GbPlWX2n3kh:pjTFiBTax1gHvwTI7wB6GboXe0h

Score

6^/10

discovery

Malware Config

Targets

- Target
  
  Screenshot_20240729_011531_TikTok.jpg
- Size
  
  24KB
- MD5
  
  20bf28be2328c3fc71cc890f85c6c427
- SHA1
  
  99338e93d92c6852cb5ca9ff5dd3ef74da4543ce
- SHA256
  
  212c00916c1969a080b1475568d3acb77da5f471e449e1a3518ec0bef3e90736
- SHA512
  
  d7d1a28417abceb7689f89adbde87cacaa1298669d9a32fcf22bc1c58f6ad08e5891205f1e2782885745c15fb3b3dc037b39246189fafe911845fdd4a215d944
- SSDEEP
  
  768:sjbMqMTFiBTizxZv1gHnvwHTIjvQZ4Bs6GbPlWX2n3kh:pjTFiBTax1gHvwTI7wB6GboXe0h
Score

6^/10

discovery
- Legitimate hosting services abused for malware hosting/C2
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2