11f96063fedd8fb8145ced067255801c12248e0059be81362feabc3d458ce442 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11f96063fedd8fb8145ced067255801c12248e0059be81362feabc3d458ce442
Size

104KB
Sample

231004-ejhegaha7x
MD5

472e17bce0faaa89d283045b5ca7f46a
SHA1

9dd25af71703a7d4dfa8ef5b493a7e45233490eb
SHA256

11f96063fedd8fb8145ced067255801c12248e0059be81362feabc3d458ce442
SHA512

047b80fbd0b4bb8ca34ec4be68cce17d0130de15da874e754d797cb33cf88748a38ed5b18a8b6354c93bf4b0d0ce05c484da62c8ce2f0e23c4c78fc6ace05e69
SSDEEP

3072:GftffjmNruuKxHSbz07u4zjJY251dZmxq4hi9ezOhu9vPt:+VfjmNAHSb45dZWqdezOhI

Score

7^/10

Malware Config

Targets

- Target
  
  11f96063fedd8fb8145ced067255801c12248e0059be81362feabc3d458ce442
- Size
  
  104KB
- MD5
  
  472e17bce0faaa89d283045b5ca7f46a
- SHA1
  
  9dd25af71703a7d4dfa8ef5b493a7e45233490eb
- SHA256
  
  11f96063fedd8fb8145ced067255801c12248e0059be81362feabc3d458ce442
- SHA512
  
  047b80fbd0b4bb8ca34ec4be68cce17d0130de15da874e754d797cb33cf88748a38ed5b18a8b6354c93bf4b0d0ce05c484da62c8ce2f0e23c4c78fc6ace05e69
- SSDEEP
  
  3072:GftffjmNruuKxHSbz07u4zjJY251dZmxq4hi9ezOhu9vPt:+VfjmNAHSb45dZWqdezOhI
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2