3e214d7ce834b319bc0a524f8b91ebc1dfd55b28e410fbd2abce9c631c6e7dfe | Triage

Sharing

General

Target

3e214d7ce834b319bc0a524f8b91ebc1dfd55b28e410fbd2abce9c631c6e7dfe
Size

38KB
Sample

221020-tdyltsccaq
MD5

5aab8275cd89ca4a43ae8aa446a6d8f0
SHA1

9daf0211d06fdb69504d8fc233bffa5e26c5a992
SHA256

3e214d7ce834b319bc0a524f8b91ebc1dfd55b28e410fbd2abce9c631c6e7dfe
SHA512

f4d22a5adf38098903c3128cb9f63d75d0f3fd78edea86972dc77692d1669e19104ac89ab2507e1e7ce48b09f8145b79123e7a3ea95adda852e8709288531181
SSDEEP

768:mumN9a3t9JG4qEm4WF8KDbZ5noyH6/hrwMw5:muI9ot9JGDnLZ5noyHQhs5

Score

8^/10

Malware Config

Targets

- Target
  
  3e214d7ce834b319bc0a524f8b91ebc1dfd55b28e410fbd2abce9c631c6e7dfe
- Size
  
  38KB
- MD5
  
  5aab8275cd89ca4a43ae8aa446a6d8f0
- SHA1
  
  9daf0211d06fdb69504d8fc233bffa5e26c5a992
- SHA256
  
  3e214d7ce834b319bc0a524f8b91ebc1dfd55b28e410fbd2abce9c631c6e7dfe
- SHA512
  
  f4d22a5adf38098903c3128cb9f63d75d0f3fd78edea86972dc77692d1669e19104ac89ab2507e1e7ce48b09f8145b79123e7a3ea95adda852e8709288531181
- SSDEEP
  
  768:mumN9a3t9JG4qEm4WF8KDbZ5noyH6/hrwMw5:muI9ot9JGDnLZ5noyHQhs5
Score

8^/10
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2