4f1d488b6eec3337d2364a56775db1ef1d394d235a0bb4cb95972daa6c1c078c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f1d488b6eec3337d2364a56775db1ef1d394d235a0bb4cb95972daa6c1c078c
Size

371KB
Sample

221106-szekeahda9
MD5

054d21f794626c421e0cd035e028cfa1
SHA1

01ebb368b6b58d32b0d9ce79056cba510114ec2d
SHA256

4f1d488b6eec3337d2364a56775db1ef1d394d235a0bb4cb95972daa6c1c078c
SHA512

12469e68290366a30016d4b61eb473202d195513cea5614240d07860ffd864ef9c8fddff3f732d372cde1a0e0becf9a22ca74e3319506e02670310b7dec34259
SSDEEP

3072:PQaY46tGNttyJQ7KRvGGg4OxL86PcvgKOEtg:446tGdywqOxLfPcvgKV

Score

8^/10

Malware Config

Targets

- Target
  
  4f1d488b6eec3337d2364a56775db1ef1d394d235a0bb4cb95972daa6c1c078c
- Size
  
  371KB
- MD5
  
  054d21f794626c421e0cd035e028cfa1
- SHA1
  
  01ebb368b6b58d32b0d9ce79056cba510114ec2d
- SHA256
  
  4f1d488b6eec3337d2364a56775db1ef1d394d235a0bb4cb95972daa6c1c078c
- SHA512
  
  12469e68290366a30016d4b61eb473202d195513cea5614240d07860ffd864ef9c8fddff3f732d372cde1a0e0becf9a22ca74e3319506e02670310b7dec34259
- SSDEEP
  
  3072:PQaY46tGNttyJQ7KRvGGg4OxL86PcvgKOEtg:446tGdywqOxLfPcvgKV
Score

8^/10
- Drops file in Drivers directory
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2