General

  • Target

    Deluxe_GMAO.exe

  • Size

    6.0MB

  • Sample

    231117-pzgg8aad6z

  • MD5

    b9c49af5eb9e855de331984c6e0d4019

  • SHA1

    5874bb1332a08608176ac2c0533537862944348f

  • SHA256

    3aedf2c793c59f5fbe562ecb114626a5104af44b125faf888aa0e7ea44eb8b14

  • SHA512

    dee9c327c0e0b62f34e03b044193a0e2693b46b7618188bbaa2194645890457850c7a2dfaf5874eac79e407be0124fb298c583258eb778a2a0090d166bc429fd

  • SSDEEP

    98304:6WljZrpdECNmipMsWqGxTlM1s21rr4iVePdVA4a0/FUDvxHOCN6AvoOHBCYTAHr8:6Kxpd9TM/xsBPnYdm4LFe8CiO1aAKaB

Score
7/10

Malware Config

Targets

    • Target

      Deluxe_GMAO.exe

    • Size

      6.0MB

    • MD5

      b9c49af5eb9e855de331984c6e0d4019

    • SHA1

      5874bb1332a08608176ac2c0533537862944348f

    • SHA256

      3aedf2c793c59f5fbe562ecb114626a5104af44b125faf888aa0e7ea44eb8b14

    • SHA512

      dee9c327c0e0b62f34e03b044193a0e2693b46b7618188bbaa2194645890457850c7a2dfaf5874eac79e407be0124fb298c583258eb778a2a0090d166bc429fd

    • SSDEEP

      98304:6WljZrpdECNmipMsWqGxTlM1s21rr4iVePdVA4a0/FUDvxHOCN6AvoOHBCYTAHr8:6Kxpd9TM/xsBPnYdm4LFe8CiO1aAKaB

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks