ff77d1b39f87bfa525c67f780c77b516a3ab05f3f794aaedfdfbe118044d3675 | Triage

Sharing

General

Target

43e4f5a31ff7c90f59f4ac9b4d2eecf5
Size

51KB
Sample

240105-rj89eadebp
MD5

43e4f5a31ff7c90f59f4ac9b4d2eecf5
SHA1

e59c6084c537ebec193ff3f19c0f906e09a71fcf
SHA256

ff77d1b39f87bfa525c67f780c77b516a3ab05f3f794aaedfdfbe118044d3675
SHA512

68bec7e25a1a4388494a9636935b0051e8466302e7ccefa399692ec69aa73d9405c6b128d5b6cd5431dec2c56c809d78a54f73e57af4f0051d65c64522384554
SSDEEP

768:hogJkE3jZoiBd5Byynjb3xMJEU0xSOumt28ZDWVx6c:hogJkE3egd28/qyUnOo8ZiV0c

Score

7^/10

Malware Config

Targets

- Target
  
  43e4f5a31ff7c90f59f4ac9b4d2eecf5
- Size
  
  51KB
- MD5
  
  43e4f5a31ff7c90f59f4ac9b4d2eecf5
- SHA1
  
  e59c6084c537ebec193ff3f19c0f906e09a71fcf
- SHA256
  
  ff77d1b39f87bfa525c67f780c77b516a3ab05f3f794aaedfdfbe118044d3675
- SHA512
  
  68bec7e25a1a4388494a9636935b0051e8466302e7ccefa399692ec69aa73d9405c6b128d5b6cd5431dec2c56c809d78a54f73e57af4f0051d65c64522384554
- SSDEEP
  
  768:hogJkE3jZoiBd5Byynjb3xMJEU0xSOumt28ZDWVx6c:hogJkE3egd28/qyUnOo8ZiV0c
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Replication Through Removable Media

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Replication Through Removable Media

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2