8df4e9aa25f951ad768ee05296da367763866ecf221a42f3745226fb59ed859e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8df4e9aa25f951ad768ee05296da367763866ecf221a42f3745226fb59ed859e
Size

128KB
Sample

221201-z7h15acc89
MD5

ab770dc9453b62b3b5810cde24efccbb
SHA1

aa1cad57e9a4c3f555627f11781103e63167dd52
SHA256

8df4e9aa25f951ad768ee05296da367763866ecf221a42f3745226fb59ed859e
SHA512

10f296507348d2d5ab959b474e08fb4af012c7e4f2ba119ab71e4c57848ff23fd2ff6495bcecff5e7d7efb879326d3077f6015927d2a5b8682e18bdf84063339
SSDEEP

3072:qeb7199TNUOgF9RYxBQeNfgegBaNaGFvDnf4A1OhxiZ:db701F9RYxm+fgeg8NaSLngu

Score

8^/10

Malware Config

Targets

- Target
  
  8df4e9aa25f951ad768ee05296da367763866ecf221a42f3745226fb59ed859e
- Size
  
  128KB
- MD5
  
  ab770dc9453b62b3b5810cde24efccbb
- SHA1
  
  aa1cad57e9a4c3f555627f11781103e63167dd52
- SHA256
  
  8df4e9aa25f951ad768ee05296da367763866ecf221a42f3745226fb59ed859e
- SHA512
  
  10f296507348d2d5ab959b474e08fb4af012c7e4f2ba119ab71e4c57848ff23fd2ff6495bcecff5e7d7efb879326d3077f6015927d2a5b8682e18bdf84063339
- SSDEEP
  
  3072:qeb7199TNUOgF9RYxBQeNfgegBaNaGFvDnf4A1OhxiZ:db701F9RYxm+fgeg8NaSLngu
Score

8^/10
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2