4d7b6c1a66dbadc13f9087e456fabe8a3c44c281e0a218598e21eaa5f7186ff1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d7b6c1a66dbadc13f9087e456fabe8a3c44c281e0a218598e21eaa5f7186ff1
Size

149KB
Sample

221129-pyjwysac84
MD5

63dd15284e00f63ce38b763848605f31
SHA1

ca26d137aae32543849f0c462fee7366b7ad9235
SHA256

4d7b6c1a66dbadc13f9087e456fabe8a3c44c281e0a218598e21eaa5f7186ff1
SHA512

a230047f76ccc75e4576cb161cee2e3aa46cc236adc7df02432379fa0848310b117d055e3a2e3a39c6581c98b011c79b0f290ca61c0158726259d30b8b9c5551
SSDEEP

3072:EquYMtS+SpBehfzapRc5nelaVLVLVLVLVzcSLe3Zd0D10z:9uxSiBWpOe3ZLz

Score

8^/10

Malware Config

Targets

- Target
  
  4d7b6c1a66dbadc13f9087e456fabe8a3c44c281e0a218598e21eaa5f7186ff1
- Size
  
  149KB
- MD5
  
  63dd15284e00f63ce38b763848605f31
- SHA1
  
  ca26d137aae32543849f0c462fee7366b7ad9235
- SHA256
  
  4d7b6c1a66dbadc13f9087e456fabe8a3c44c281e0a218598e21eaa5f7186ff1
- SHA512
  
  a230047f76ccc75e4576cb161cee2e3aa46cc236adc7df02432379fa0848310b117d055e3a2e3a39c6581c98b011c79b0f290ca61c0158726259d30b8b9c5551
- SSDEEP
  
  3072:EquYMtS+SpBehfzapRc5nelaVLVLVLVLVzcSLe3Zd0D10z:9uxSiBWpOe3ZLz
Score

8^/10
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2