31ab86366c8c2c2533c7af01b151effd7399d730b1b7911e58eb8e371911dcf8

General

Target
31ab86366c8c2c2533c7af01b151effd7399d730b1b7911e58eb8e371911dcf8.exe
Size 629KB
Sample260810-rp23aawvbz
SHA256 31ab86366c8c2c2533c7af01b151effd7399d730b1b7911e58eb8e371911dcf8
MD5 4fb53e314be4146f665a636ce7889664
SHA1 a3199ef0989f563d2a52a5877bbf17c1b66bd22a
SHA512 f33fcc959bb4fd07cfd60c078884ad3a5bf1446039937b83229ce9ebcbcc12b735ea581f71c48db5789df5ce2e61af606ca474f75e49d9e0dd4db008afc050fd
SSDEEP 12288:wtg++Nmxxy6Bhfll71ZEZBhA3+vRcndQmQZC7qJj:wMNmnBhflB1qZA30ydQm0v
TLSH
T10DD41210EB82D8D9D1768574D6F5D6F66630BCDCD920632B5B08BFBABC39A44CE39204
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  31ab86366c8c2c2533c7af01b151effd7399d730b1b7911e58eb8e371911dcf8.exe
- Size 629KB
- SHA256 31ab86366c8c2c2533c7af01b151effd7399d730b1b7911e58eb8e371911dcf8
- MD5 4fb53e314be4146f665a636ce7889664
- SHA1 a3199ef0989f563d2a52a5877bbf17c1b66bd22a
- SHA512 f33fcc959bb4fd07cfd60c078884ad3a5bf1446039937b83229ce9ebcbcc12b735ea581f71c48db5789df5ce2e61af606ca474f75e49d9e0dd4db008afc050fd
- SSDEEP 12288:wtg++Nmxxy6Bhfll71ZEZBhA3+vRcndQmQZC7qJj:wMNmnBhflB1qZA30ydQm0v
- TLSH
  T10DD41210EB82D8D9D1768574D6F5D6F66630BCDCD920632B5B08BFBABC39A44CE39204
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 25KB
- SHA256 c7dd8cc8323e295b8821b0e320de208a7e20c068a8be8d03857520451ce9ded7
- MD5 4abf19a47044ec746aa8c600f0bc149f
- SHA1 69da1e4f654b044d7b3c845c12a07c988bf26eb8
- SHA512 65727cbe3f03e0dceba06d206054e60adba321d29159b4bfb690c30b2ccd1a0a05a08c2aa50ac270fcd28557f4b482f492c36b0d7b7b980b477cd8971559610e
- SSDEEP 384:jZ2pfUx9eVLwDKO9XYD/isN7lCEjgwMU/ktKi+R45Duwomq8pqdDvH81Q:jr96YIrx7lC7vU/kaG9uLmCdb
- TLSH
  T1DEB24C07F38398BFC51BC17186EF5772AA32BE211B616F6F1220F5756E24EA0871DA14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 a0a6431feb4e09018d99acdc02f2139fbacd68420b0f84d4b22a9e091aaac707
- MD5 48452d7f73a0e73b62a16b4c88068a60
- SHA1 ef5a3edd25cf3cf664e93c38fbe9034ce652d117
- SHA512 83dae4699678c2eb245bb3a5758b9decdae308042bf50a36266222a9c20f197503baad9f58f2522c6bfe32ad62b8af6ab6b8f99f2e51b72383f6c50d4d699274
- SSDEEP 192:PZWhF6MuqMgfdPvg/YWkNLiY8vSKXS6Hn5gIIblaks8NHAHPEdeqe4KFz0:hWh4MFv1w/YWCLXASKi6nAlHJAl4KW
- TLSH
  T13852191B7B42962ACD0AE374D5EF573322F3F4551138370E0669DB49BFE1660DA39288
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Web Service

1

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Contacts third-party web service commonly abused for C2

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6