425c7276bb5974c78275eafaf81e0c4ad996753bfb3e4cae04dc176ce656799e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d60825a4f6d774047cc20ba3814640f
Size

80KB
Sample

231226-pcep4shdel
MD5

6d60825a4f6d774047cc20ba3814640f
SHA1

eeb4a4125993779a75c0d81a542f40b0a88b9e53
SHA256

425c7276bb5974c78275eafaf81e0c4ad996753bfb3e4cae04dc176ce656799e
SHA512

2b03a200fb41c9f2e6e7843276b84e19665e1d2616aeb788a3dd6c795c41e25575f3de77fedfcc5967801752f83380cd0e7e85400a137434c8536a22ba56df0a
SSDEEP

1536:0kDro9Ash6VQZtlRtQlQ7pYw/zQymCJVVBZu3BHp231vcaLCCfVVG6sxaM:3DvsEU8lGpD/NZBZF1vcaLCsT/Mj

Score

8^/10

Malware Config

Targets

- Target
  
  GOLAYA-DEVOCHKA.exe
- Size
  
  180KB
- MD5
  
  731790f96390935dcf6c9451c7b80c68
- SHA1
  
  92e152be11147d807725aa55aea4825675f654f5
- SHA256
  
  58a80f311c14624bf50f9e45db0e62a5a4902ecffeeda120ad0d775ac109d4a9
- SHA512
  
  76de1b2e02c166d79b1a5079219cc7546a61d1e982a3b58e927695001725c9f50216c2cf4bd3d49d009debd2107f68eaf9751c4bdb0408cf3a508658c58af515
- SSDEEP
  
  3072:oBAp5XhKpN4eOyVTGfhEClj8jTk+0hN7+mYnhIAhyYyOK01:fbXE9OiTGfhEClq9s+mYnhIAhy8/1
Score

8^/10
- Blocklisted process makes network request
- Drops file in Drivers directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2