Overview

overview

7

Static

static

3

b95ead9edc...c8.exe

windows7-x64

7

b95ead9edc...c8.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b95ead9edc700442db467f67186f2347475c5f85149edc52ad5a79f9f9d136c8.exe.zip

  • Size

    4.1MB

  • Sample

    231031-rfgd8ahd9y

  • MD5

    dd5148e38211bdeb65950937794e2724

  • SHA1

    5c8ed0d8d9198158630198e7dc64261e7dba4268

  • SHA256

    48e18d86888c00f62dfa7b46f4b024d1c659ce2d9ba35c2dfa95480d05f37500

  • SHA512

    162c8c6639ee9dc68ac9d5f48a1df29c0286ead20a081caf4fa80f9c346d7160c437892935cc9d58e1da4e2cdd78b0adb056cd8d5caafa6d1d4a7ff0281a80c4

  • SSDEEP

    98304:aK9uEuRkus5+rc8FwoD2zRvfRe7qp1TXsuWG3cWdGnhSBAqKfrX9:aK9IRkurzhDeRvZ9hRLcWEcAnTX9

Score
7/10

Malware Config

Targets

    • Target

      b95ead9edc700442db467f67186f2347475c5f85149edc52ad5a79f9f9d136c8.exe

    • Size

      4.8MB

    • MD5

      9f06141883d93cd036f7a1070c02731a

    • SHA1

      c007fa0fe138de13e67af4775b015cd6b9501b31

    • SHA256

      b95ead9edc700442db467f67186f2347475c5f85149edc52ad5a79f9f9d136c8

    • SHA512

      a9277ddfd7074015c00ae25ef3074332740174d52c39c1b0818cdd6fa5a7adee33f60ea6e46b096858e0871e20ca665fdde5e03e0e27deca3924ba1d8d3dee99

    • SSDEEP

      98304:ZSnpGb1FLqQF6dWry//DthQiooP2qDAZF/wMVIrxHKTPVY3+ygXsH3T+KpO:snpA1oMuWr45hrr2VFIMS58rXsH3HpO

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks