fe525368a2171b1866d26e37e3aae3fe8b2f60154adaaf1e82a8bf099123b6f5 | Triage

Sharing

General

Target

fe525368a2171b1866d26e37e3aae3fe8b2f60154adaaf1e82a8bf099123b6f5
Size

16KB
Sample

241120-j67p4atphv
MD5

bc9afbdae04d5958f1f9e23c6339ad6d
SHA1

708ea2616f8455bcf58078bd29a1b908dac57757
SHA256

fe525368a2171b1866d26e37e3aae3fe8b2f60154adaaf1e82a8bf099123b6f5
SHA512

7923ea152a651bc80facef2e8d9da7f5e9018d8f1b4727ae772e69f55abdfb77bbd3bbbfbf1d6e9d694f3ede3f5d67a1fb4cab4654ce9e86ebf50382ae1b2e13
SSDEEP

384:3y75+v7k3CbLGKjfSwgKzfqtCjVE8Oe9+XDunbDMu:CwbLhSeTqWEDDunXt

Score

10^/10

discovery

Malware Config

Targets

- Target
  
  fe525368a2171b1866d26e37e3aae3fe8b2f60154adaaf1e82a8bf099123b6f5
- Size
  
  16KB
- MD5
  
  bc9afbdae04d5958f1f9e23c6339ad6d
- SHA1
  
  708ea2616f8455bcf58078bd29a1b908dac57757
- SHA256
  
  fe525368a2171b1866d26e37e3aae3fe8b2f60154adaaf1e82a8bf099123b6f5
- SHA512
  
  7923ea152a651bc80facef2e8d9da7f5e9018d8f1b4727ae772e69f55abdfb77bbd3bbbfbf1d6e9d694f3ede3f5d67a1fb4cab4654ce9e86ebf50382ae1b2e13
- SSDEEP
  
  384:3y75+v7k3CbLGKjfSwgKzfqtCjVE8Oe9+XDunbDMu:CwbLhSeTqWEDDunXt
Score

10^/10

discovery
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Drops startup file
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2