cd1c750cd10f9768c7552627c9c76e62c4f164bb958c5b9a5066707af9d23550 | Triage

Sharing

General

Target

cd1c750cd10f9768c7552627c9c76e62c4f164bb958c5b9a5066707af9d23550
Size

64KB
Sample

221204-m93r4ach56
MD5

3746f30b531d9f3a017cf1a73e7d8060
SHA1

51cad0a3d23d32a9ac92cf7ca6edc5151e16b462
SHA256

cd1c750cd10f9768c7552627c9c76e62c4f164bb958c5b9a5066707af9d23550
SHA512

79a1ca45a34ffab00ce97cfb51bd8b4bbee4387e8dd2b8bca5c516bffa5283f7da605a17f22e67c0722f7009bfb471453613bc1abb14d470b21225c1684cb39d
SSDEEP

1536:Gm46BS7LL18Uo9yHSmdmzwGkbr3kM+IxODZiqWiYVhvBsWqLJ7ERJyq8uhgDAw87:GMBon18ryHSqB

Score

8^/10

Malware Config

Targets

- Target
  
  cd1c750cd10f9768c7552627c9c76e62c4f164bb958c5b9a5066707af9d23550
- Size
  
  64KB
- MD5
  
  3746f30b531d9f3a017cf1a73e7d8060
- SHA1
  
  51cad0a3d23d32a9ac92cf7ca6edc5151e16b462
- SHA256
  
  cd1c750cd10f9768c7552627c9c76e62c4f164bb958c5b9a5066707af9d23550
- SHA512
  
  79a1ca45a34ffab00ce97cfb51bd8b4bbee4387e8dd2b8bca5c516bffa5283f7da605a17f22e67c0722f7009bfb471453613bc1abb14d470b21225c1684cb39d
- SSDEEP
  
  1536:Gm46BS7LL18Uo9yHSmdmzwGkbr3kM+IxODZiqWiYVhvBsWqLJ7ERJyq8uhgDAw87:GMBon18ryHSqB
Score

8^/10
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2