854059e0502b82c07b64899a60a3550cb68534b9aac9440f93350bdf920f9bfe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

854059e0502b82c07b64899a60a3550cb68534b9aac9440f93350bdf920f9bfe
Size

1.4MB
Sample

240818-bvlz9a1aqr
MD5

379326a1382c4041bc173e46acb40eca
SHA1

c954c5a81c60f775878fc2c86b61c4e9b48027a8
SHA256

854059e0502b82c07b64899a60a3550cb68534b9aac9440f93350bdf920f9bfe
SHA512

a88e680871df9ad9434d67620722fc51aa2736046e8e0cba459553156f1b2bc4eb838d1596110af5ee73afd2fc2fc5d9aa9cf5587c1c9b146006161d7a2a92c8
SSDEEP

24576:LumqXw8ZJiK9/5EBWmVva/ZSNHFp77Lv+f6T8Qnskb2i6OBKaBBbxQ:OwDsxEBWmVvgCHFpbq4TTJbG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  854059e0502b82c07b64899a60a3550cb68534b9aac9440f93350bdf920f9bfe
- Size
  
  1.4MB
- MD5
  
  379326a1382c4041bc173e46acb40eca
- SHA1
  
  c954c5a81c60f775878fc2c86b61c4e9b48027a8
- SHA256
  
  854059e0502b82c07b64899a60a3550cb68534b9aac9440f93350bdf920f9bfe
- SHA512
  
  a88e680871df9ad9434d67620722fc51aa2736046e8e0cba459553156f1b2bc4eb838d1596110af5ee73afd2fc2fc5d9aa9cf5587c1c9b146006161d7a2a92c8
- SSDEEP
  
  24576:LumqXw8ZJiK9/5EBWmVva/ZSNHFp77Lv+f6T8Qnskb2i6OBKaBBbxQ:OwDsxEBWmVvgCHFpbq4TTJbG
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2