fadf5db8b8ad33c09f05cbfbe516e0e4340cf6105ec0c7b457bc865cd6effb0f | Triage

Sharing

General

Target

fadf5db8b8ad33c09f05cbfbe516e0e4340cf6105ec0c7b457bc865cd6effb0f
Size

1.6MB
Sample

240925-gcbdpa1cpf
MD5

576878cdea2aac597f23ccc8c33014b0
SHA1

5cec14583ac184a0ed88ec108ee3781199382a5b
SHA256

fadf5db8b8ad33c09f05cbfbe516e0e4340cf6105ec0c7b457bc865cd6effb0f
SHA512

1dde3e96d10839608091d60e07d9a719b8c5b66c72bfdd7190dd8701577d9788cd57d61f62b3b44e879e49eebf1dca2ae4b52371087ad31e870d7e3cb49c73bc
SSDEEP

49152:XYLiZUlUGG3dZynV4oDabuWbDQOcIxJJV:oLiZUJCv+RDabpH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fadf5db8b8ad33c09f05cbfbe516e0e4340cf6105ec0c7b457bc865cd6effb0f
- Size
  
  1.6MB
- MD5
  
  576878cdea2aac597f23ccc8c33014b0
- SHA1
  
  5cec14583ac184a0ed88ec108ee3781199382a5b
- SHA256
  
  fadf5db8b8ad33c09f05cbfbe516e0e4340cf6105ec0c7b457bc865cd6effb0f
- SHA512
  
  1dde3e96d10839608091d60e07d9a719b8c5b66c72bfdd7190dd8701577d9788cd57d61f62b3b44e879e49eebf1dca2ae4b52371087ad31e870d7e3cb49c73bc
- SSDEEP
  
  49152:XYLiZUlUGG3dZynV4oDabuWbDQOcIxJJV:oLiZUJCv+RDabpH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2