f8a8df688da71632c557437047ab4ea5aa58ef274ade68b871216d9969aa8c6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8a8df688da71632c557437047ab4ea5aa58ef274ade68b871216d9969aa8c6e
Size

34KB
Sample

221122-ax8fladb58
MD5

35cef4d8899d029b91292671489c1d70
SHA1

4fd6705c5797c80cf38316719c10ff0f36eeb149
SHA256

f8a8df688da71632c557437047ab4ea5aa58ef274ade68b871216d9969aa8c6e
SHA512

6a3e0289b00ed2177345f558db05f38feb6d7d361f02f9ec5323975337ae9b1616a3dff033ebfb6e6dfd9e405b433b43203c1e3b2d5481244906fbaa11dd81cf
SSDEEP

768:AcQhyn/CSQ7JJLQCFNCMhKFZRtEltyF2JbRD+TGseKIfirwp:vQhyn/m7JJLZiMw3TEltyF25t+2ti

Score

8^/10

Malware Config

Targets

- Target
  
  f8a8df688da71632c557437047ab4ea5aa58ef274ade68b871216d9969aa8c6e
- Size
  
  34KB
- MD5
  
  35cef4d8899d029b91292671489c1d70
- SHA1
  
  4fd6705c5797c80cf38316719c10ff0f36eeb149
- SHA256
  
  f8a8df688da71632c557437047ab4ea5aa58ef274ade68b871216d9969aa8c6e
- SHA512
  
  6a3e0289b00ed2177345f558db05f38feb6d7d361f02f9ec5323975337ae9b1616a3dff033ebfb6e6dfd9e405b433b43203c1e3b2d5481244906fbaa11dd81cf
- SSDEEP
  
  768:AcQhyn/CSQ7JJLQCFNCMhKFZRtEltyF2JbRD+TGseKIfirwp:vQhyn/m7JJLZiMw3TEltyF25t+2ti
Score

8^/10
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2