2ed97ff3dd61b1bc0d1d81d66f97bfda5e27549ac807a5347163c1efa388cbd4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ed97ff3dd61b1bc0d1d81d66f97bfda5e27549ac807a5347163c1efa388cbd4
Size

2.9MB
Sample

231125-zzh16adb61
MD5

08cac5e369e7baf28bfb10a2e0e1fd15
SHA1

ebee715d4b3f8caa2a695d13ea98ce8a2dff3677
SHA256

2ed97ff3dd61b1bc0d1d81d66f97bfda5e27549ac807a5347163c1efa388cbd4
SHA512

c3be3f7ac203fe16fe01aa29196b9acdadf023bda30c6aad4ed2015a426dbacaa046b1024d776c96c250dae5cbd4663f9dfc3823fe15a88e92ed5403aa7bb595
SSDEEP

49152:57A4uoDZPMOEdhVVaPMhUrDR4hBLqF7Dlk3pWbUFImsSjYH6Xoj9ghi1RebpyTIq:OmZPMZhLdhUrt4fLqF7DlkZVItSjYH6C

Score

7^/10

Malware Config

Targets

- Target
  
  2ed97ff3dd61b1bc0d1d81d66f97bfda5e27549ac807a5347163c1efa388cbd4
- Size
  
  2.9MB
- MD5
  
  08cac5e369e7baf28bfb10a2e0e1fd15
- SHA1
  
  ebee715d4b3f8caa2a695d13ea98ce8a2dff3677
- SHA256
  
  2ed97ff3dd61b1bc0d1d81d66f97bfda5e27549ac807a5347163c1efa388cbd4
- SHA512
  
  c3be3f7ac203fe16fe01aa29196b9acdadf023bda30c6aad4ed2015a426dbacaa046b1024d776c96c250dae5cbd4663f9dfc3823fe15a88e92ed5403aa7bb595
- SSDEEP
  
  49152:57A4uoDZPMOEdhVVaPMhUrDR4hBLqF7Dlk3pWbUFImsSjYH6Xoj9ghi1RebpyTIq:OmZPMZhLdhUrt4fLqF7DlkZVItSjYH6C
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2