5777515ef44464d49aa0789d35faf78f0d3fd819887b3bc78a554726104f7eb2 | Triage

Sharing

General

Target

5777515ef44464d49aa0789d35faf78f0d3fd819887b3bc78a554726104f7eb2.exe
Size

165KB
Sample

241119-n3hc9avhqc
MD5

50aadf43e97bff19c1a9e1030cae4c4e
SHA1

949fe67f175d1f8defed2e9194329268b9665cd0
SHA256

5777515ef44464d49aa0789d35faf78f0d3fd819887b3bc78a554726104f7eb2
SHA512

f78a943deb5f54dd55357475e405c998c4e67604774952ccbb75ca826bb251a39dd02d9ec6b7239b9198578815831f8f7daa096e859819f88f093c233d891347
SSDEEP

3072:DGiWBRqDnnKI2VZU7Y6XJs1Nvr5jnM0qTur:DGiWBUrKI20TXo+b

Score

10^/10

discovery

Malware Config

Targets

- Target
  
  5777515ef44464d49aa0789d35faf78f0d3fd819887b3bc78a554726104f7eb2.exe
- Size
  
  165KB
- MD5
  
  50aadf43e97bff19c1a9e1030cae4c4e
- SHA1
  
  949fe67f175d1f8defed2e9194329268b9665cd0
- SHA256
  
  5777515ef44464d49aa0789d35faf78f0d3fd819887b3bc78a554726104f7eb2
- SHA512
  
  f78a943deb5f54dd55357475e405c998c4e67604774952ccbb75ca826bb251a39dd02d9ec6b7239b9198578815831f8f7daa096e859819f88f093c233d891347
- SSDEEP
  
  3072:DGiWBRqDnnKI2VZU7Y6XJs1Nvr5jnM0qTur:DGiWBUrKI20TXo+b
Score

10^/10

discovery
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Drops startup file
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2