ec9bd2843b752a5359dae58470fd8b2a7460e1c887927201f8d04f405b9892e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec9bd2843b752a5359dae58470fd8b2a7460e1c887927201f8d04f405b9892e1
Size

122KB
Sample

240113-bxbx3aaca6
MD5

85c3c4132983eecc44905bfc16cd7b99
SHA1

bff716a66d4c69bc50d749c0668a7ec53a03bbe0
SHA256

ec9bd2843b752a5359dae58470fd8b2a7460e1c887927201f8d04f405b9892e1
SHA512

6b44a330a68c1717422bfa69ecb5dcbe3d71696ed9fadde36adf3665a62dfa6cae3245db9c5980b29dbca6ca0ecb671741b304d83fb447a9ff6006464c467101
SSDEEP

3072:vftffjmNoxCoFHzg2I0PpPNX6RLXWertCQyyNU:XVfjmNiZzhPpPNq6QyH

Score

7^/10

Malware Config

Targets

- Target
  
  ec9bd2843b752a5359dae58470fd8b2a7460e1c887927201f8d04f405b9892e1
- Size
  
  122KB
- MD5
  
  85c3c4132983eecc44905bfc16cd7b99
- SHA1
  
  bff716a66d4c69bc50d749c0668a7ec53a03bbe0
- SHA256
  
  ec9bd2843b752a5359dae58470fd8b2a7460e1c887927201f8d04f405b9892e1
- SHA512
  
  6b44a330a68c1717422bfa69ecb5dcbe3d71696ed9fadde36adf3665a62dfa6cae3245db9c5980b29dbca6ca0ecb671741b304d83fb447a9ff6006464c467101
- SSDEEP
  
  3072:vftffjmNoxCoFHzg2I0PpPNX6RLXWertCQyyNU:XVfjmNiZzhPpPNq6QyH
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2