Overview

overview

8

Static

static

1

d1c68a180a...56.exe

windows7-x64

8

d1c68a180a...56.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d1c68a180a091558c7a31862eb3f4aa4996e35eccd6fa24f1080f52abd174156

  • Size

    323KB

  • Sample

    221124-armxpsad3t

  • MD5

    434f99e3c2b4a7541237716c5b4cb740

  • SHA1

    90cb1d2ac35323855940bb73b0bd0f9b96b9f32e

  • SHA256

    d1c68a180a091558c7a31862eb3f4aa4996e35eccd6fa24f1080f52abd174156

  • SHA512

    c210e736e2e76cdb027230c5cb0f42af5a4123637ca13aaf0c19c3e80edd34ab3bebf91969331f93fb79bbfde23d197896dc5b027b1cfbaaad92cb84388b4acd

  • SSDEEP

    6144:P+aE/Be34RTMlHyCn4ik6yiUfFY2SzpYn2/gnqqjG:P+aExTaFkJy2Sz6n2/

Score
8/10

Malware Config

Targets

    • Target

      d1c68a180a091558c7a31862eb3f4aa4996e35eccd6fa24f1080f52abd174156

    • Size

      323KB

    • MD5

      434f99e3c2b4a7541237716c5b4cb740

    • SHA1

      90cb1d2ac35323855940bb73b0bd0f9b96b9f32e

    • SHA256

      d1c68a180a091558c7a31862eb3f4aa4996e35eccd6fa24f1080f52abd174156

    • SHA512

      c210e736e2e76cdb027230c5cb0f42af5a4123637ca13aaf0c19c3e80edd34ab3bebf91969331f93fb79bbfde23d197896dc5b027b1cfbaaad92cb84388b4acd

    • SSDEEP

      6144:P+aE/Be34RTMlHyCn4ik6yiUfFY2SzpYn2/gnqqjG:P+aExTaFkJy2Sz6n2/

    Score
    8/10

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks