3f1d85d9c3020e8f5d5ae29a5af347158571ff1f959ca0d7bef9b42a40c0e3c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f1d85d9c3020e8f5d5ae29a5af347158571ff1f959ca0d7bef9b42a40c0e3c6
Size

11.4MB
Sample

230819-pjs63shg52
MD5

c3ff781f8e11d548af1e13c5804f88a3
SHA1

e24e84a693914c3c3ffe354fb6720a725c4b7b95
SHA256

3f1d85d9c3020e8f5d5ae29a5af347158571ff1f959ca0d7bef9b42a40c0e3c6
SHA512

a23cf49b5a84bff4903e903e3d5e00e6c13082752ddf06d2586e884248d1362bc3c08bb6ea78182c8a1bbe941211353e19ee504ba54cbcb2d0b538f830e80354
SSDEEP

196608:jpPaI0j0GGXh1toX6qpZLEkeHaC8h06T9S3QxshY033boETZWIE+jAmlgw17CDTl:jpzxGgdo8keHQK6Je/hY0HkEd6mqw1Gl

Score

7^/10

Malware Config

Targets

- Target
  
  3f1d85d9c3020e8f5d5ae29a5af347158571ff1f959ca0d7bef9b42a40c0e3c6
- Size
  
  11.4MB
- MD5
  
  c3ff781f8e11d548af1e13c5804f88a3
- SHA1
  
  e24e84a693914c3c3ffe354fb6720a725c4b7b95
- SHA256
  
  3f1d85d9c3020e8f5d5ae29a5af347158571ff1f959ca0d7bef9b42a40c0e3c6
- SHA512
  
  a23cf49b5a84bff4903e903e3d5e00e6c13082752ddf06d2586e884248d1362bc3c08bb6ea78182c8a1bbe941211353e19ee504ba54cbcb2d0b538f830e80354
- SSDEEP
  
  196608:jpPaI0j0GGXh1toX6qpZLEkeHaC8h06T9S3QxshY033boETZWIE+jAmlgw17CDTl:jpzxGgdo8keHQK6Je/hY0HkEd6mqw1Gl
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2