3c6d4e500c06b513aebca2bb9dfe49c25e65f28afb44552bd3c421d7567a78fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.462dce9e0b618db100b1af9977b8a730.exe
Size

372KB
Sample

231014-wgcvmshh2x
MD5

462dce9e0b618db100b1af9977b8a730
SHA1

a7fc9dd69f7c850bac205da13dc6578752ce6100
SHA256

3c6d4e500c06b513aebca2bb9dfe49c25e65f28afb44552bd3c421d7567a78fb
SHA512

e15448e3c8647f768ae1ebb07fafd4d89604a3c3acbba0851fefeb9f8e338f3d33f88d5b30dbb04fd5cfb93a5c5f5fb817d55499847b4f4a3efc555112cc7bd0
SSDEEP

6144:UcHe3ozJkTLLlZwYoaPeZKOthYird7BWSX3pH:UoQOaPMjhxrd7B1N

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  NEAS.462dce9e0b618db100b1af9977b8a730.exe
- Size
  
  372KB
- MD5
  
  462dce9e0b618db100b1af9977b8a730
- SHA1
  
  a7fc9dd69f7c850bac205da13dc6578752ce6100
- SHA256
  
  3c6d4e500c06b513aebca2bb9dfe49c25e65f28afb44552bd3c421d7567a78fb
- SHA512
  
  e15448e3c8647f768ae1ebb07fafd4d89604a3c3acbba0851fefeb9f8e338f3d33f88d5b30dbb04fd5cfb93a5c5f5fb817d55499847b4f4a3efc555112cc7bd0
- SSDEEP
  
  6144:UcHe3ozJkTLLlZwYoaPeZKOthYird7BWSX3pH:UoQOaPMjhxrd7B1N
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2