9272a0ca7542ef993f431fc943f3a2eb9bf395dbb1dbbf2c483fc36cba365bb2

Sharing

Copy URL Twitter E-mail

General

Target
9272a0ca7542ef993f431fc943f3a2eb9bf395dbb1dbbf2c483fc36cba365bb2.exe
Size 700KB
Sample260810-xmcx9saa88
SHA256 9272a0ca7542ef993f431fc943f3a2eb9bf395dbb1dbbf2c483fc36cba365bb2
MD5 991c574817e1e53def29dfbb96222480
SHA1 e0117c241037364afd92ea0f5f84c45936a3b7b0
SHA512 b8309e02f414a0faae76ab19c4067b5528032309d973193b41998f862208f667867e487ffa2d5e5b21c072cb052dacbb46c0bdfb992b28c619a32569f7977004
SSDEEP 12288:WT2Zk/ELBdJi8WBAn5FDMcPErM+NburfkqmRUWCjNXfLNkVYW86joMAZHLlbbHOl:WqeQvqWFDMcPkjbT9cjNXfLeGeJA7OxT
TLSH
T1D3E412A53E90C896FAA96BB05D278024A4F47CDD05E3830EF7BB377692F6391550F206
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  9272a0ca7542ef993f431fc943f3a2eb9bf395dbb1dbbf2c483fc36cba365bb2.exe
- Size 700KB
- SHA256 9272a0ca7542ef993f431fc943f3a2eb9bf395dbb1dbbf2c483fc36cba365bb2
- MD5 991c574817e1e53def29dfbb96222480
- SHA1 e0117c241037364afd92ea0f5f84c45936a3b7b0
- SHA512 b8309e02f414a0faae76ab19c4067b5528032309d973193b41998f862208f667867e487ffa2d5e5b21c072cb052dacbb46c0bdfb992b28c619a32569f7977004
- SSDEEP 12288:WT2Zk/ELBdJi8WBAn5FDMcPErM+NburfkqmRUWCjNXfLNkVYW86joMAZHLlbbHOl:WqeQvqWFDMcPkjbT9cjNXfLeGeJA7OxT
- TLSH
  T1D3E412A53E90C896FAA96BB05D278024A4F47CDD05E3830EF7BB377692F6391550F206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 b80a5cba69d1853ed5979b0ca0352437bf368a5cfb86cb4528edadd410e11352
- MD5 c9473cb90d79a374b2ba6040ca16e45c
- SHA1 ab95b54f12796dce57210d65f05124a6ed81234a
- SHA512 eafe7d5894622bc21f663bca4dd594392ee0f5b29270b6b56b0187093d6a3a103545464ff6398ad32d2cf15dab79b1f133218ba9ba337ddc01330b5ada804d7b
- SSDEEP 192:cPtkumJX7zBE2kGwfy9S9VkPsFQ1MZ1c:N7O2k5q9wA1MZa
- TLSH
  T1B2324C15031086F3E1D2853D682B39AB2FB969118AF04E438FB36952FE346C7AD79352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 5157fe688cca27d348171bd5a8b117de348c0844ca5cb82bc68cbd7d873a3fdc
- MD5 12465ce89d3853918ed3476d70223226
- SHA1 4c9f4b8b77a254c2aeace08c78c1cffbb791640d
- SHA512 20495270bcd0cae3102ffae0a3e783fad5f0218a5e844c767b07a10d2cfab2fab0afb5e07befa531ba466393a3d6255741f89c6def21ec2887234f49adceea2f
- SSDEEP 96:oOYqZ4zC5RH3cXX1LlYlRowycxM2DjDf3GEst+Nt+jvDYx4L7qndYHnxss:oOYq+CP3uKrpyREs06YxA2dGn
- TLSH
  T1C4121A635A4455F3D5D7223A21AA2F2FD73C9324A062BC0287779E462BF431A7D3A341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 370e47364561fa501b1300b056fb53fae12b1639fdf5f113275bee03546081c0
- MD5 0a6f707fa22c3f3e5d1abb54b0894ad6
- SHA1 610cb2c3623199d0d7461fc775297e23cef88c4e
- SHA512 af0c8ca0c892f1b757fbd700061f3d81417dff11d89bdff45e977de81ad51c97862406cf7e230e76cf99497f93f57bf09609740953cd81b0d795465ac2623ea8
- SSDEEP 96:e97GUxNkO6GR0t9GKKr1Zd8NHYVVHp4dEeY3kRnHdMqqyVgN0u3e:eBXhHR0aTQN4gRHdMqJVgN0N
- TLSH
  T130D1097675E22EB3C50ECA353C527A2B57F8C8111B9401549B938BD238C5EB3EA39282
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Contacts third-party web service commonly abused for C2

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8