57f5bdbf3437b84b8f2c6b5fd58e7a157077666e0822d2d498a9db161e818b94 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57f5bdbf3437b84b8f2c6b5fd58e7a157077666e0822d2d498a9db161e818b94
Size

725KB
Sample

221206-ypjdhahc28
MD5

e917362f0e5956d0198f2b320fe12332
SHA1

b06acf5f9ff02aea07976a4bd56139d51ac769db
SHA256

57f5bdbf3437b84b8f2c6b5fd58e7a157077666e0822d2d498a9db161e818b94
SHA512

488e4fef7ac8037d707be3a8c95e346601721de35d117d88d578bd41420291cf6c7c74eab564439dc4e7aaaba9b976bb2d58db174446eb77e8def8b761950c9c
SSDEEP

12288:7CatIwPtT2lwPtT2VpmxqDbHks2XnFxXKdOUzD1Duc18Wy:7zVPtT2OPtT2VpmUHU3F4Tzlu/

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  57f5bdbf3437b84b8f2c6b5fd58e7a157077666e0822d2d498a9db161e818b94
- Size
  
  725KB
- MD5
  
  e917362f0e5956d0198f2b320fe12332
- SHA1
  
  b06acf5f9ff02aea07976a4bd56139d51ac769db
- SHA256
  
  57f5bdbf3437b84b8f2c6b5fd58e7a157077666e0822d2d498a9db161e818b94
- SHA512
  
  488e4fef7ac8037d707be3a8c95e346601721de35d117d88d578bd41420291cf6c7c74eab564439dc4e7aaaba9b976bb2d58db174446eb77e8def8b761950c9c
- SSDEEP
  
  12288:7CatIwPtT2lwPtT2VpmxqDbHks2XnFxXKdOUzD1Duc18Wy:7zVPtT2OPtT2VpmUHU3F4Tzlu/
Score

8^/10

evasion
- Executes dropped EXE
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2