Overview

overview

8

Static

static

e14f055415...3a.exe

windows7-x64

8

e14f055415...3a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e14f055415d3dd999146f86ffd05017c94a7745a1144aec71b00ed53413b373a

  • Size

    297KB

  • Sample

    221124-a1bk2aah9z

  • MD5

    430083690ac9c6c926daae9ea65ebcd0

  • SHA1

    1e4dc96a63f36867e5e37183a46d5884b5ca4dde

  • SHA256

    e14f055415d3dd999146f86ffd05017c94a7745a1144aec71b00ed53413b373a

  • SHA512

    1406fced199c6aed20619f1408c2b931997ad67aed5cc27b7f019f69e0d27531673af8a527b339fafe1a4409903f639e75ed52fb9ae1de5d791dadcfdee142ba

  • SSDEEP

    3072:YpH4IiETpBblVu/k9CaNNptwfBXb7kNQNvvPxcwr73lwjdrh8fd7t38+u9fOSQTd:i4INTzuMfNrtwf93keHC3Z+Qe7

Score
8/10

Malware Config

Targets

    • Target

      e14f055415d3dd999146f86ffd05017c94a7745a1144aec71b00ed53413b373a

    • Size

      297KB

    • MD5

      430083690ac9c6c926daae9ea65ebcd0

    • SHA1

      1e4dc96a63f36867e5e37183a46d5884b5ca4dde

    • SHA256

      e14f055415d3dd999146f86ffd05017c94a7745a1144aec71b00ed53413b373a

    • SHA512

      1406fced199c6aed20619f1408c2b931997ad67aed5cc27b7f019f69e0d27531673af8a527b339fafe1a4409903f639e75ed52fb9ae1de5d791dadcfdee142ba

    • SSDEEP

      3072:YpH4IiETpBblVu/k9CaNNptwfBXb7kNQNvvPxcwr73lwjdrh8fd7t38+u9fOSQTd:i4INTzuMfNrtwf93keHC3Z+Qe7

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks