c388861e031555a311be912db7a272a2d5786edf950df62dbed3d7e757456717 | Triage

Sharing

General

Target

c388861e031555a311be912db7a272a2d5786edf950df62dbed3d7e757456717
Size

1.6MB
Sample

241001-gw454svanr
MD5

edb6a505039a4deb0ad97736b04f2814
SHA1

2d4ad44f26623f033d2054e3bccde4ee5e6b9598
SHA256

c388861e031555a311be912db7a272a2d5786edf950df62dbed3d7e757456717
SHA512

30137fb616b3a9702ab75f5cdd3d5b88506b133eb6453b8a477d5bbccc05fd7fdbc1e65abf78b3a86bead138b59f2923794b6f35573a690e215fcb2ee72ccbc3
SSDEEP

49152:PSa4rW1NC/3XZynV4oDabuWbDQOcIxJJV:Ka4rWePp+RDabpv

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c388861e031555a311be912db7a272a2d5786edf950df62dbed3d7e757456717
- Size
  
  1.6MB
- MD5
  
  edb6a505039a4deb0ad97736b04f2814
- SHA1
  
  2d4ad44f26623f033d2054e3bccde4ee5e6b9598
- SHA256
  
  c388861e031555a311be912db7a272a2d5786edf950df62dbed3d7e757456717
- SHA512
  
  30137fb616b3a9702ab75f5cdd3d5b88506b133eb6453b8a477d5bbccc05fd7fdbc1e65abf78b3a86bead138b59f2923794b6f35573a690e215fcb2ee72ccbc3
- SSDEEP
  
  49152:PSa4rW1NC/3XZynV4oDabuWbDQOcIxJJV:Ka4rWePp+RDabpv
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2