049a92c5cc5b81645504e2ef4107ca6c079dd2d9007524c8e278a52d541e3530 | Triage

Sharing

General

Target

049a92c5cc5b81645504e2ef4107ca6c079dd2d9007524c8e278a52d541e3530
Size

59KB
Sample

221121-sbh8paaa4w
MD5

11b6012ca7147d923865623508141d3d
SHA1

6758b41b2b9c239f066f031d8b0abcf49384defd
SHA256

049a92c5cc5b81645504e2ef4107ca6c079dd2d9007524c8e278a52d541e3530
SHA512

dd0b3af74fc15e1399880e6d26201295a3aa0a50f37351c4079b77bda0d19e4f326f7d984aa919baddde3050956e85e36167b1fe0d17c6c20c80e85edabce2c9
SSDEEP

768:QHOlwY1ZscptqnVcsPBwD3Ai4qDPmt/ZyHRVbHOlwY:QuxsItqQ3AiG/ZyHRpu

Score

8^/10

Malware Config

Targets

- Target
  
  049a92c5cc5b81645504e2ef4107ca6c079dd2d9007524c8e278a52d541e3530
- Size
  
  59KB
- MD5
  
  11b6012ca7147d923865623508141d3d
- SHA1
  
  6758b41b2b9c239f066f031d8b0abcf49384defd
- SHA256
  
  049a92c5cc5b81645504e2ef4107ca6c079dd2d9007524c8e278a52d541e3530
- SHA512
  
  dd0b3af74fc15e1399880e6d26201295a3aa0a50f37351c4079b77bda0d19e4f326f7d984aa919baddde3050956e85e36167b1fe0d17c6c20c80e85edabce2c9
- SSDEEP
  
  768:QHOlwY1ZscptqnVcsPBwD3Ai4qDPmt/ZyHRVbHOlwY:QuxsItqQ3AiG/ZyHRpu
Score

8^/10
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2