cb864ee58088275b6e6635126cb02f1870dd1b98f39d5445e4dcc2a29df4f880 | Triage

Sharing

General

Target

cb864ee58088275b6e6635126cb02f1870dd1b98f39d5445e4dcc2a29df4f880N.exe
Size

2.2MB
Sample

241120-fpzrdawngm
MD5

a639e151caae0afe5972c65869ed6af0
SHA1

1b301f425d7c098b7de9b5e46cd86e8a8914ae31
SHA256

cb864ee58088275b6e6635126cb02f1870dd1b98f39d5445e4dcc2a29df4f880
SHA512

5893f96ea3e2ab36d5b42ac0ff75fc1c1337c9ee2b44373eda22f5418ae23b28939b6b4cf50d997df13b79564a00e8efb620376a4ea417e74313847f4f35d5a6
SSDEEP

24576:xIxSYpi0E/TU4DW4BbhuYa2ntUKYZTKa/ZSGa/JXfp77Lv+f6T8gsihEChlUu+Oz:xQSIUrth37PYZKgpglpbNsm+OWiT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  cb864ee58088275b6e6635126cb02f1870dd1b98f39d5445e4dcc2a29df4f880N.exe
- Size
  
  2.2MB
- MD5
  
  a639e151caae0afe5972c65869ed6af0
- SHA1
  
  1b301f425d7c098b7de9b5e46cd86e8a8914ae31
- SHA256
  
  cb864ee58088275b6e6635126cb02f1870dd1b98f39d5445e4dcc2a29df4f880
- SHA512
  
  5893f96ea3e2ab36d5b42ac0ff75fc1c1337c9ee2b44373eda22f5418ae23b28939b6b4cf50d997df13b79564a00e8efb620376a4ea417e74313847f4f35d5a6
- SSDEEP
  
  24576:xIxSYpi0E/TU4DW4BbhuYa2ntUKYZTKa/ZSGa/JXfp77Lv+f6T8gsihEChlUu+Oz:xQSIUrth37PYZKgpglpbNsm+OWiT
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2