5ae9e2ca9637ab0f175f00a3a6cdfefaca09782c98dfee61abb4081f2e96e152 | Triage

Sharing

General

Target

5ae9e2ca9637ab0f175f00a3a6cdfefaca09782c98dfee61abb4081f2e96e152
Size

128KB
Sample

221129-g7flwsge6t
MD5

ae85b8aeeb3ebc4aa52768a7baf5228c
SHA1

6eb1a8391f7e27910b5da84c828e9c0feeab5e90
SHA256

5ae9e2ca9637ab0f175f00a3a6cdfefaca09782c98dfee61abb4081f2e96e152
SHA512

b0ef2603dbf058e8620a50ee0b4428f86c5ba309504ad883a0f2c88b880e34ec58969cdb7ba0871042dca515dce3cea67b651c2ca074869fce42a4d0213103ad
SSDEEP

3072:T4SAR8Nn1g1Y3vZoqbkI3/gOouVJWJf4SAR8N:TzASn1Jx7gGW5zAS

Score

8^/10

Malware Config

Targets

- Target
  
  5ae9e2ca9637ab0f175f00a3a6cdfefaca09782c98dfee61abb4081f2e96e152
- Size
  
  128KB
- MD5
  
  ae85b8aeeb3ebc4aa52768a7baf5228c
- SHA1
  
  6eb1a8391f7e27910b5da84c828e9c0feeab5e90
- SHA256
  
  5ae9e2ca9637ab0f175f00a3a6cdfefaca09782c98dfee61abb4081f2e96e152
- SHA512
  
  b0ef2603dbf058e8620a50ee0b4428f86c5ba309504ad883a0f2c88b880e34ec58969cdb7ba0871042dca515dce3cea67b651c2ca074869fce42a4d0213103ad
- SSDEEP
  
  3072:T4SAR8Nn1g1Y3vZoqbkI3/gOouVJWJf4SAR8N:TzASn1Jx7gGW5zAS
Score

8^/10
- Drops file in Drivers directory
- Executes dropped EXE
- Drops startup file
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2