86f94854d286997c039aacb09e2673e02d92dfba901dd90f6d2dcf0096d7a798 | Triage

Sharing

General

Target

86f94854d286997c039aacb09e2673e02d92dfba901dd90f6d2dcf0096d7a798
Size

771KB
Sample

240821-nxxkzswgpg
MD5

8850ebb38817aca0f249e817ac5476c6
SHA1

f2bed7c64c278dd831f7cb6aa4e235263c76b095
SHA256

86f94854d286997c039aacb09e2673e02d92dfba901dd90f6d2dcf0096d7a798
SHA512

865462be22b43927b1a5059ba682faf41503814874ee6a1027098970142ecc53f2b5b2c34798aadc6922189f53ff9a05c700d07d6ff3c3d754d4acc10e5b6a85
SSDEEP

12288:QUyPkmI62sZwFYJobsTYD+dxv1/Td3mw/3:gkTWwFYJyD+dxv1/57/

Score

8^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  86f94854d286997c039aacb09e2673e02d92dfba901dd90f6d2dcf0096d7a798
- Size
  
  771KB
- MD5
  
  8850ebb38817aca0f249e817ac5476c6
- SHA1
  
  f2bed7c64c278dd831f7cb6aa4e235263c76b095
- SHA256
  
  86f94854d286997c039aacb09e2673e02d92dfba901dd90f6d2dcf0096d7a798
- SHA512
  
  865462be22b43927b1a5059ba682faf41503814874ee6a1027098970142ecc53f2b5b2c34798aadc6922189f53ff9a05c700d07d6ff3c3d754d4acc10e5b6a85
- SSDEEP
  
  12288:QUyPkmI62sZwFYJobsTYD+dxv1/Td3mw/3:gkTWwFYJyD+dxv1/57/
Score

8^/10

defense_evasion discovery
- Downloads MZ/PE file
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

defense_evasiondiscovery