8a89ea16f8e9a7d4c10d96bdd9755cae52c63afb13f72a94fb38265a9a03e7eb | Triage

Sharing

General

Target

8a89ea16f8e9a7d4c10d96bdd9755cae52c63afb13f72a94fb38265a9a03e7eb
Size

8.6MB
Sample

221201-bpn8esbg24
MD5

13fdef8dea09d567bd026610e89dd655
SHA1

4be812613b91c4cc67da32e57d1e43b02b775603
SHA256

8a89ea16f8e9a7d4c10d96bdd9755cae52c63afb13f72a94fb38265a9a03e7eb
SHA512

85ace092ba010e0c9c3675a8b6dd79f65c11393850ab5f9da1a2974306429fee61c14f9abdf59f203e2a02bfc2e33b72b308c3d1e1de5c9624b04f6c9c9eef67
SSDEEP

196608:tA5ecyQqn9BDDgRmrvOahk1sPyYdI4sPnAxcqTK:eeGqn9BDD82Ox6PyUL+AxcqTK

Score

8^/10

Malware Config

Targets

- Target
  
  8a89ea16f8e9a7d4c10d96bdd9755cae52c63afb13f72a94fb38265a9a03e7eb
- Size
  
  8.6MB
- MD5
  
  13fdef8dea09d567bd026610e89dd655
- SHA1
  
  4be812613b91c4cc67da32e57d1e43b02b775603
- SHA256
  
  8a89ea16f8e9a7d4c10d96bdd9755cae52c63afb13f72a94fb38265a9a03e7eb
- SHA512
  
  85ace092ba010e0c9c3675a8b6dd79f65c11393850ab5f9da1a2974306429fee61c14f9abdf59f203e2a02bfc2e33b72b308c3d1e1de5c9624b04f6c9c9eef67
- SSDEEP
  
  196608:tA5ecyQqn9BDDgRmrvOahk1sPyYdI4sPnAxcqTK:eeGqn9BDD82Ox6PyUL+AxcqTK
Score

8^/10
- Executes dropped EXE
- Loads dropped DLL
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Replication Through Removable Media

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Replication Through Removable Media

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2