c186a3eedefd429f850a34287cee4504f3818549be701a53e2574ed1e13a529c | Triage

Sharing

General

Target

c186a3eedefd429f850a34287cee4504f3818549be701a53e2574ed1e13a529c
Size

412KB
Sample

221020-29g8qaahh3
MD5

554b5fcbc2ead0aa00d2a0026be825d0
SHA1

4238f35d21b27ba86a71cf672f3e472948999b1e
SHA256

c186a3eedefd429f850a34287cee4504f3818549be701a53e2574ed1e13a529c
SHA512

12f17193933a7dcecae48da957d17f6514c412a866f884483d86369cbfba55368fc0f1b907b11c01e84f2d5287d7b785a0a4da1f20582b3689e1500b741a6477
SSDEEP

6144:TzASNI9UuWoxdqLaFHAyq/0FR7RthyKU/l7kKBI1HaYVfdyJefiQyY8yzAS:Ptc9RxMIHAkhyKyVkKB0HaXY3

Score

8^/10

Malware Config

Targets

- Target
  
  c186a3eedefd429f850a34287cee4504f3818549be701a53e2574ed1e13a529c
- Size
  
  412KB
- MD5
  
  554b5fcbc2ead0aa00d2a0026be825d0
- SHA1
  
  4238f35d21b27ba86a71cf672f3e472948999b1e
- SHA256
  
  c186a3eedefd429f850a34287cee4504f3818549be701a53e2574ed1e13a529c
- SHA512
  
  12f17193933a7dcecae48da957d17f6514c412a866f884483d86369cbfba55368fc0f1b907b11c01e84f2d5287d7b785a0a4da1f20582b3689e1500b741a6477
- SSDEEP
  
  6144:TzASNI9UuWoxdqLaFHAyq/0FR7RthyKU/l7kKBI1HaYVfdyJefiQyY8yzAS:Ptc9RxMIHAkhyKyVkKB0HaXY3
Score

8^/10
- Drops file in Drivers directory
- Executes dropped EXE
- Drops startup file
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2