6218991e135c51766abc462aa393b3b4f5460824c8bd767d1f997b0c7d54f650 | Triage

Sharing

General

Target

6218991e135c51766abc462aa393b3b4f5460824c8bd767d1f997b0c7d54f650
Size

20KB
Sample

221123-vn9mhsce4y
MD5

479ebb62ea78dc8b2bbbe180c171b780
SHA1

36a2bc47b44dfcfd37c2762b66f13e616c217ea7
SHA256

6218991e135c51766abc462aa393b3b4f5460824c8bd767d1f997b0c7d54f650
SHA512

968fb8893691df3f8b6400e7e6a794926e0c2f0fad0142cbaea2bd3a01cf3d579b8e5bb61505ffcdf859ff5fa3a17b3bfde38e145f023dec082fed71b689e304
SSDEEP

192:Np91TsJER6fHpUeLhUeKv45GWpaJzEACsIYQDRFmOO2tIe4DKio4aCIkgUwzJr3L:NxAE6FsvsGTzEVYQP4ZXcr3le2UcSU

Score

8^/10

Malware Config

Targets

- Target
  
  6218991e135c51766abc462aa393b3b4f5460824c8bd767d1f997b0c7d54f650
- Size
  
  20KB
- MD5
  
  479ebb62ea78dc8b2bbbe180c171b780
- SHA1
  
  36a2bc47b44dfcfd37c2762b66f13e616c217ea7
- SHA256
  
  6218991e135c51766abc462aa393b3b4f5460824c8bd767d1f997b0c7d54f650
- SHA512
  
  968fb8893691df3f8b6400e7e6a794926e0c2f0fad0142cbaea2bd3a01cf3d579b8e5bb61505ffcdf859ff5fa3a17b3bfde38e145f023dec082fed71b689e304
- SSDEEP
  
  192:Np91TsJER6fHpUeLhUeKv45GWpaJzEACsIYQDRFmOO2tIe4DKio4aCIkgUwzJr3L:NxAE6FsvsGTzEVYQP4ZXcr3le2UcSU
Score

8^/10
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Replication Through Removable Media

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Replication Through Removable Media

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2