8eb04958f9d7b77139939bdaddf36a836c7a9624d48b174e3db0ea2ada23c05f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41c33db329ae6263940adca6904f0f39
Size

733KB
Sample

240104-ylhb2ahghn
MD5

41c33db329ae6263940adca6904f0f39
SHA1

c15f0db29c2cbd2af2189b51ae44c9411ce45541
SHA256

8eb04958f9d7b77139939bdaddf36a836c7a9624d48b174e3db0ea2ada23c05f
SHA512

0d9e384c3e16bc22ba123b1a5fbecf43efe080e5a60a6067c20aac125d3ff3016f190717e6dada8b2fa22353a4cacfbd78ac76c50d39620b887f2b2ecc14c83a
SSDEEP

12288:oBJW6v6EsyZB6TqeQ1/6zVJG3YL9oWCR1jxdM/SErIh05n1IeE/jv8+Ws/xRJKiz:obW6v6E1ZkTGiGIeWCDxVIGmOf/jv8+r

Score

7^/10

Malware Config

Targets

- Target
  
  ha-disk and registry alert.exe
- Size
  
  763KB
- MD5
  
  b7406b6db7560ad67e1918a1a3175449
- SHA1
  
  e14ac55d1ddce1f56b6f792623b592f5a6213b78
- SHA256
  
  089d523ce1d47dfe2543351ee040adc51151d6aca5e83e62d10c22a3526280d2
- SHA512
  
  3f65bd775fda1a098ab8ad8ee51c9c77b96b195318ee187aeeb9ea152c9177f0c605d4596d0a325e062447ab1d031428f5e335131110fb8295866a62fd9a7c03
- SSDEEP
  
  12288:M2/ezv07YyKe4MD2A92P8AqKJHThg4n1sEvdntwTLuDIU5KyqtWIKfWTBDO:72zv+KzMD2A92PmKZT5sEvdntwQIYqtg
Score

7^/10
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2