7260180bdf0e9386b5c43e096e1a9ec8f8a7276bed3485c00d31779e689083fe | Triage

Sharing

General

Target

7260180bdf0e9386b5c43e096e1a9ec8f8a7276bed3485c00d31779e689083fe
Size

2.8MB
Sample

240909-2ww5qawgmf
MD5

0fa28c8386144b11bdb9ecb42058004f
SHA1

5405973d4bef347035738bf46caf4f4a9b96df79
SHA256

7260180bdf0e9386b5c43e096e1a9ec8f8a7276bed3485c00d31779e689083fe
SHA512

d7680b23c470698c243ab1c3135a8bef3a0893ea64f4a69e2ec6ecf2be92c6b540efad61f8450571051a040f024f44526c6ce9430ee1afd20541627bfa5f6736
SSDEEP

49152:EWm2xsCW1kowmWfTeYKGpFW8MTH9GRMZn9NwUY2Yvyw4wj+DbM4GoCaLO5/w18+O:Pm2FswmITTKUI8gH5Z8UU4jAR5/a8+ol

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  7260180bdf0e9386b5c43e096e1a9ec8f8a7276bed3485c00d31779e689083fe
- Size
  
  2.8MB
- MD5
  
  0fa28c8386144b11bdb9ecb42058004f
- SHA1
  
  5405973d4bef347035738bf46caf4f4a9b96df79
- SHA256
  
  7260180bdf0e9386b5c43e096e1a9ec8f8a7276bed3485c00d31779e689083fe
- SHA512
  
  d7680b23c470698c243ab1c3135a8bef3a0893ea64f4a69e2ec6ecf2be92c6b540efad61f8450571051a040f024f44526c6ce9430ee1afd20541627bfa5f6736
- SSDEEP
  
  49152:EWm2xsCW1kowmWfTeYKGpFW8MTH9GRMZn9NwUY2Yvyw4wj+DbM4GoCaLO5/w18+O:Pm2FswmITTKUI8gH5Z8UU4jAR5/a8+ol
Score

7^/10

defense_evasion discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2