5eba89aae797ba61a4fa1e2d34b99fc8c640cc28d037d84f4a75d7f2dabc9184 | Triage

Sharing

General

Target

5eba89aae797ba61a4fa1e2d34b99fc8c640cc28d037d84f4a75d7f2dabc9184
Size

1.1MB
Sample

221124-arhb8afb44
MD5

4def29bc70afa4bdceeaefbab4329d30
SHA1

b7c093f4124bc4150dec407d57efb6fcfafafa7f
SHA256

5eba89aae797ba61a4fa1e2d34b99fc8c640cc28d037d84f4a75d7f2dabc9184
SHA512

70487e99d495b036f1760ed224bd61b877d0ff2d05aa8206fc0a2c19c3dfa7b3a57e8d420acd708ad636f657aabcf9c4b8971298474b01d534d71550dd2ea905
SSDEEP

12288:G5qOPajQUXXP8QvLWFx6Mo5rippDC7ee1hpls4Ey+g:G5najQEPnvg6PhWDC750g

Score

8^/10

Malware Config

Targets

- Target
  
  5eba89aae797ba61a4fa1e2d34b99fc8c640cc28d037d84f4a75d7f2dabc9184
- Size
  
  1.1MB
- MD5
  
  4def29bc70afa4bdceeaefbab4329d30
- SHA1
  
  b7c093f4124bc4150dec407d57efb6fcfafafa7f
- SHA256
  
  5eba89aae797ba61a4fa1e2d34b99fc8c640cc28d037d84f4a75d7f2dabc9184
- SHA512
  
  70487e99d495b036f1760ed224bd61b877d0ff2d05aa8206fc0a2c19c3dfa7b3a57e8d420acd708ad636f657aabcf9c4b8971298474b01d534d71550dd2ea905
- SSDEEP
  
  12288:G5qOPajQUXXP8QvLWFx6Mo5rippDC7ee1hpls4Ey+g:G5najQEPnvg6PhWDC750g
Score

8^/10
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2