3e9984911682eb6337b0e115f4e2eb5a53ca6f510951b73b52d31bfe25cc1131 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e9984911682eb6337b0e115f4e2eb5a53ca6f510951b73b52d31bfe25cc1131N
Size

1.0MB
Sample

241001-ayngtawfkd
MD5

e42cd20204c9719bcdce776583a0a8d0
SHA1

3e5f85bf63eb61795ae50367854da992a74d126f
SHA256

3e9984911682eb6337b0e115f4e2eb5a53ca6f510951b73b52d31bfe25cc1131
SHA512

71031f4eab4e1b018e8368e62cd742aab2d2d5422e96c75156ece04ca53ccf6f410c0b02a27e50801faa2d1216243258644d97b8299ab194d3375ff479be7863
SSDEEP

24576:Gq39BcOhvmKFKVPGYe9ncpZ3rka/JS9a/ZH:z9+OhvmKFK34cv3rkgig

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3e9984911682eb6337b0e115f4e2eb5a53ca6f510951b73b52d31bfe25cc1131N
- Size
  
  1.0MB
- MD5
  
  e42cd20204c9719bcdce776583a0a8d0
- SHA1
  
  3e5f85bf63eb61795ae50367854da992a74d126f
- SHA256
  
  3e9984911682eb6337b0e115f4e2eb5a53ca6f510951b73b52d31bfe25cc1131
- SHA512
  
  71031f4eab4e1b018e8368e62cd742aab2d2d5422e96c75156ece04ca53ccf6f410c0b02a27e50801faa2d1216243258644d97b8299ab194d3375ff479be7863
- SSDEEP
  
  24576:Gq39BcOhvmKFKVPGYe9ncpZ3rka/JS9a/ZH:z9+OhvmKFK34cv3rkgig
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2