d5df0d0eb5005424dfd584ec5ef355a7e0fe0ad4fee53a191b1b9bfb9d615eb4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5df0d0eb5005424dfd584ec5ef355a7e0fe0ad4fee53a191b1b9bfb9d615eb4
Size

61KB
Sample

231119-flf5vshg6w
MD5

4a7cfec46488c4775792f654247cda5d
SHA1

cee11554f8303a8c45d5ec6db89950e23e679c4d
SHA256

d5df0d0eb5005424dfd584ec5ef355a7e0fe0ad4fee53a191b1b9bfb9d615eb4
SHA512

a79fb543787476817ad0374f6982d53bc13bffeff1332a9e2094b3d14acd8ff0c9e10114d41ae852b810de6353d42bec53a473e0a2c60883def02139632d242b
SSDEEP

1536:TW13SHuJV9QaxSzc1kVQctbHB1gTXL7heiEE:TAkuJVFSqctbHB1ufQJE

Score

7^/10

Malware Config

Targets

- Target
  
  d5df0d0eb5005424dfd584ec5ef355a7e0fe0ad4fee53a191b1b9bfb9d615eb4
- Size
  
  61KB
- MD5
  
  4a7cfec46488c4775792f654247cda5d
- SHA1
  
  cee11554f8303a8c45d5ec6db89950e23e679c4d
- SHA256
  
  d5df0d0eb5005424dfd584ec5ef355a7e0fe0ad4fee53a191b1b9bfb9d615eb4
- SHA512
  
  a79fb543787476817ad0374f6982d53bc13bffeff1332a9e2094b3d14acd8ff0c9e10114d41ae852b810de6353d42bec53a473e0a2c60883def02139632d242b
- SSDEEP
  
  1536:TW13SHuJV9QaxSzc1kVQctbHB1gTXL7heiEE:TAkuJVFSqctbHB1ufQJE
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2