dd38d5d1e995ab5be388d16598aeb6e2d61d3b204dee996c65cd6d36ab056b3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd38d5d1e995ab5be388d16598aeb6e2d61d3b204dee996c65cd6d36ab056b3c
Size

965KB
Sample

221002-a3cacafdfk
MD5

70372c6764dc7b5da8793fb21d1b9680
SHA1

bff07328e02343cb31e0dc86c2141c17b99e84fd
SHA256

dd38d5d1e995ab5be388d16598aeb6e2d61d3b204dee996c65cd6d36ab056b3c
SHA512

e83a7ed7c927f33c43c5d262658dfb1a7daeac1025a50179c3fb3a8d36ae6bfc09fb500adfd8399a71a19dc7f3a792d161959d78e2f3a4ec86e942877bb26322
SSDEEP

12288:jrmHRRqUlf7HazblEOGSEzUvzblE4wEQRUSEcfv44IdmIKJ:jr8RqAa+OP+ac34g

Score

8^/10

Malware Config

Targets

- Target
  
  dd38d5d1e995ab5be388d16598aeb6e2d61d3b204dee996c65cd6d36ab056b3c
- Size
  
  965KB
- MD5
  
  70372c6764dc7b5da8793fb21d1b9680
- SHA1
  
  bff07328e02343cb31e0dc86c2141c17b99e84fd
- SHA256
  
  dd38d5d1e995ab5be388d16598aeb6e2d61d3b204dee996c65cd6d36ab056b3c
- SHA512
  
  e83a7ed7c927f33c43c5d262658dfb1a7daeac1025a50179c3fb3a8d36ae6bfc09fb500adfd8399a71a19dc7f3a792d161959d78e2f3a4ec86e942877bb26322
- SSDEEP
  
  12288:jrmHRRqUlf7HazblEOGSEzUvzblE4wEQRUSEcfv44IdmIKJ:jr8RqAa+OP+ac34g
Score

8^/10
- Drops file in Drivers directory
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2