646502f9091773085cbf4cc9651f6292f0ee25d973c267b5af84a2742350c714 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

646502f9091773085cbf4cc9651f6292f0ee25d973c267b5af84a2742350c714
Size

2.7MB
Sample

231015-cdh3psee75
MD5

e2fe292a8e565e5cd70e0464cf4d448f
SHA1

f1bce048971b051983fd2b19d12de642b72be3a0
SHA256

646502f9091773085cbf4cc9651f6292f0ee25d973c267b5af84a2742350c714
SHA512

413df4d0679467f47c2f366a792d09103476a92e2290141488d104055b01201754405ea9e30c21ba464a9700d965d08c817cf9532c4c645ad3fef528a4110d6b
SSDEEP

49152:Ax0zsq3OZnoNGg8pmEdJBSfFc+cZh80ydKsagsd2bQmBBxzaCzwmM:rsqUcdQmBBNLz6

Score

7^/10

Malware Config

Targets

- Target
  
  646502f9091773085cbf4cc9651f6292f0ee25d973c267b5af84a2742350c714
- Size
  
  2.7MB
- MD5
  
  e2fe292a8e565e5cd70e0464cf4d448f
- SHA1
  
  f1bce048971b051983fd2b19d12de642b72be3a0
- SHA256
  
  646502f9091773085cbf4cc9651f6292f0ee25d973c267b5af84a2742350c714
- SHA512
  
  413df4d0679467f47c2f366a792d09103476a92e2290141488d104055b01201754405ea9e30c21ba464a9700d965d08c817cf9532c4c645ad3fef528a4110d6b
- SSDEEP
  
  49152:Ax0zsq3OZnoNGg8pmEdJBSfFc+cZh80ydKsagsd2bQmBBxzaCzwmM:rsqUcdQmBBNLz6
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2