c21376b5312e703d05d23a9b502adbbbe5664f72ca744cf40d28aeb7f9a23aed | Triage

Sharing

General

Target

c21376b5312e703d05d23a9b502adbbbe5664f72ca744cf40d28aeb7f9a23aed
Size

178KB
Sample

221203-gf7ajadd3t
MD5

5e27289e555900ac8239df5e2de75643
SHA1

9cca801fecca11f210c671b427e99d7163c3853b
SHA256

c21376b5312e703d05d23a9b502adbbbe5664f72ca744cf40d28aeb7f9a23aed
SHA512

3f404d364987b49988dcf3bff17a627802b62ab86922d935628807b505d6c22f2b7b4abd0eea6a8d3d6d4401b2972ab51d534af82a0f1edf2aa43a77448e97e6
SSDEEP

3072:DLhJ3a9u0owgCEef0YkjQLd5B+F4gFyVUUEmAfnWP5n9Y:/3l3es25sFtXmSM9

Score

8^/10

Malware Config

Targets

- Target
  
  c21376b5312e703d05d23a9b502adbbbe5664f72ca744cf40d28aeb7f9a23aed
- Size
  
  178KB
- MD5
  
  5e27289e555900ac8239df5e2de75643
- SHA1
  
  9cca801fecca11f210c671b427e99d7163c3853b
- SHA256
  
  c21376b5312e703d05d23a9b502adbbbe5664f72ca744cf40d28aeb7f9a23aed
- SHA512
  
  3f404d364987b49988dcf3bff17a627802b62ab86922d935628807b505d6c22f2b7b4abd0eea6a8d3d6d4401b2972ab51d534af82a0f1edf2aa43a77448e97e6
- SSDEEP
  
  3072:DLhJ3a9u0owgCEef0YkjQLd5B+F4gFyVUUEmAfnWP5n9Y:/3l3es25sFtXmSM9
Score

8^/10
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2