cee47af8608b312485d935cef8cd3baaae8a6f96b67e884500420b544508c548 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cee47af8608b312485d935cef8cd3baaae8a6f96b67e884500420b544508c548
Size

13.8MB
Sample

231012-ga31xsac3s
MD5

ab4150308a92c4786e8b1956bcdc2310
SHA1

3e61ef6c5931fe4b33cdb20d477397493abdb581
SHA256

cee47af8608b312485d935cef8cd3baaae8a6f96b67e884500420b544508c548
SHA512

27a90fa1cd1c89c641364ddc837d4b2af5bfa7f666c0be35893ed6422d10ebb2361243af1a15d54cc8700ff32baeb4f2522645098d42291744c886166a838dc6
SSDEEP

196608:fNym2iBYGfsV3Cfab7n1ISo7gtuFJTJ4U7iYoMx0nggI/SACkCkyhXQ6ldGsTQNH:fN4H3QnSKgfYsnZgpvCEWy

Score

9^/10

evasion

Malware Config

Targets

- Target
  
  cee47af8608b312485d935cef8cd3baaae8a6f96b67e884500420b544508c548
- Size
  
  13.8MB
- MD5
  
  ab4150308a92c4786e8b1956bcdc2310
- SHA1
  
  3e61ef6c5931fe4b33cdb20d477397493abdb581
- SHA256
  
  cee47af8608b312485d935cef8cd3baaae8a6f96b67e884500420b544508c548
- SHA512
  
  27a90fa1cd1c89c641364ddc837d4b2af5bfa7f666c0be35893ed6422d10ebb2361243af1a15d54cc8700ff32baeb4f2522645098d42291744c886166a838dc6
- SSDEEP
  
  196608:fNym2iBYGfsV3Cfab7n1ISo7gtuFJTJ4U7iYoMx0nggI/SACkCkyhXQ6ldGsTQNH:fN4H3QnSKgfYsnZgpvCEWy
Score

9^/10

evasion
- Looks for VirtualBox Guest Additions in registry
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2