0e3d935e915dae96e73ffcddb5ab65a4d78bf9db5cd6fca7575385cf03e6efc4 | Triage

Sharing

General

Target

0e3d935e915dae96e73ffcddb5ab65a4d78bf9db5cd6fca7575385cf03e6efc4
Size

32KB
Sample

221002-al32qsefdp
MD5

6687c4083d5b492a8b5642f264d2b3d0
SHA1

d50bf1bdaaa0f51de00672d1a3989ba055f14984
SHA256

0e3d935e915dae96e73ffcddb5ab65a4d78bf9db5cd6fca7575385cf03e6efc4
SHA512

85216017552289d8552d2ba42cce60877dc0d738d4b181fed4c87b25f51f1882dda6aa420eeb82ff4d648a2fa3e3d8557ac6a944e990d1a10e5b1b725da8dc75
SSDEEP

768:VtquN3rVg6MEv+t8U+JKirjT3Yxj0Jjm:Vtquxh/MEvesKirfYx6

Score

7^/10

Malware Config

Targets

- Target
  
  0e3d935e915dae96e73ffcddb5ab65a4d78bf9db5cd6fca7575385cf03e6efc4
- Size
  
  32KB
- MD5
  
  6687c4083d5b492a8b5642f264d2b3d0
- SHA1
  
  d50bf1bdaaa0f51de00672d1a3989ba055f14984
- SHA256
  
  0e3d935e915dae96e73ffcddb5ab65a4d78bf9db5cd6fca7575385cf03e6efc4
- SHA512
  
  85216017552289d8552d2ba42cce60877dc0d738d4b181fed4c87b25f51f1882dda6aa420eeb82ff4d648a2fa3e3d8557ac6a944e990d1a10e5b1b725da8dc75
- SSDEEP
  
  768:VtquN3rVg6MEv+t8U+JKirjT3Yxj0Jjm:Vtquxh/MEvesKirfYx6
Score

7^/10
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2