a63b06c68dc2fcb174076ad195ea6a54dc6b364c4bff0964f191ebb47e9f6c67 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a63b06c68dc2fcb174076ad195ea6a54dc6b364c4bff0964f191ebb47e9f6c67
Size

876KB
Sample

221003-eebfcsehd5
MD5

6a5c6cddc4ca01d6ba2deee90f06e670
SHA1

f32376f65ef2d09a212f3362d300f7460405606d
SHA256

a63b06c68dc2fcb174076ad195ea6a54dc6b364c4bff0964f191ebb47e9f6c67
SHA512

3c5d97c503ca5990e40b80966d5bb5cb1a2f65e7b5fcd0f025d72a6feb64cae975652362c83a728c83bc79cff657c4b869cdd289f2d53c51bc862e587bec200e
SSDEEP

24576:bautr5OUF2PbjR2HJ/rpxzC+3w/wPiX3hH7eDw:bauX2Pbjcp/lyoask

Score

8^/10

Malware Config

Targets

- Target
  
  a63b06c68dc2fcb174076ad195ea6a54dc6b364c4bff0964f191ebb47e9f6c67
- Size
  
  876KB
- MD5
  
  6a5c6cddc4ca01d6ba2deee90f06e670
- SHA1
  
  f32376f65ef2d09a212f3362d300f7460405606d
- SHA256
  
  a63b06c68dc2fcb174076ad195ea6a54dc6b364c4bff0964f191ebb47e9f6c67
- SHA512
  
  3c5d97c503ca5990e40b80966d5bb5cb1a2f65e7b5fcd0f025d72a6feb64cae975652362c83a728c83bc79cff657c4b869cdd289f2d53c51bc862e587bec200e
- SSDEEP
  
  24576:bautr5OUF2PbjR2HJ/rpxzC+3w/wPiX3hH7eDw:bauX2Pbjcp/lyoask
Score

8^/10
- Drops file in Drivers directory
- Executes dropped EXE
- Drops startup file
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2