Overview

overview

7

Static

static

3

c327913da3...0a.exe

windows7-x64

7

c327913da3...0a.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c327913da3050e7071752e30c1d8885bb5cd53c6641ef9683e0d70cc3366020a

  • Size

    487KB

  • Sample

    240427-151ntshf79

  • MD5

    ecfe9c75e9eeb5256b7f117638db4984

  • SHA1

    6d20c46202841e5c65f99ce9cdd45a38d4ab5c01

  • SHA256

    c327913da3050e7071752e30c1d8885bb5cd53c6641ef9683e0d70cc3366020a

  • SHA512

    3383f69d7bcb2776b4351111a71dad2e0c7602ef57bc12b7139750e1a11841ea7abeb16ea90f46ab7b068dc7fe71b3c6920ff851c509743248f0c428222e8363

  • SSDEEP

    6144:mUuJoz1gL5pRTMTTjMkId/BynSx7dEe6XwzRaktNP08NhKs39zo43fTtl1fayCV4:f1gL5pRTcAkS/3hzN8qE43fm78V

Score
7/10

Malware Config

Targets

    • Target

      c327913da3050e7071752e30c1d8885bb5cd53c6641ef9683e0d70cc3366020a

    • Size

      487KB

    • MD5

      ecfe9c75e9eeb5256b7f117638db4984

    • SHA1

      6d20c46202841e5c65f99ce9cdd45a38d4ab5c01

    • SHA256

      c327913da3050e7071752e30c1d8885bb5cd53c6641ef9683e0d70cc3366020a

    • SHA512

      3383f69d7bcb2776b4351111a71dad2e0c7602ef57bc12b7139750e1a11841ea7abeb16ea90f46ab7b068dc7fe71b3c6920ff851c509743248f0c428222e8363

    • SSDEEP

      6144:mUuJoz1gL5pRTMTTjMkId/BynSx7dEe6XwzRaktNP08NhKs39zo43fTtl1fayCV4:f1gL5pRTcAkS/3hzN8qE43fm78V

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks