General

  • Target
    17ad820c6a27854ee3b63c7c43131a58eca48dba8ddb56405bf11059f4a41bed.exe
  • Size 171KB
  • Sample260831-lynclazbpb
  • SHA256 17ad820c6a27854ee3b63c7c43131a58eca48dba8ddb56405bf11059f4a41bed
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      17ad820c6a27854ee3b63c7c43131a58eca48dba8ddb56405bf11059f4a41bed.exe
    • Size 171KB
    • SHA256 17ad820c6a27854ee3b63c7c43131a58eca48dba8ddb56405bf11059f4a41bed
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 381ce74fe2c93bd7f31faeb05bd223b25354a03b6ac3098145f5a943272c4c02
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks