0014549b07099d35bd02e85b42cf07c36bc289e56d36b3aa3a38d356e2609080 | Triage

Sharing

General

Target

0014549b07099d35bd02e85b42cf07c36bc289e56d36b3aa3a38d356e2609080
Size

209KB
Sample

240220-pq4amaga7x
MD5

d46c2e4f139469026284838b2dbc76f8
SHA1

dc7f2fa37c047e93ae1e5c913f0cfd7c03d5ac84
SHA256

0014549b07099d35bd02e85b42cf07c36bc289e56d36b3aa3a38d356e2609080
SHA512

47b225a4b6265521dca53794cb53920802065a46683fbd047c029d13350c14bae263129446843a55481cadc076e3d26ffd63869dec553c67d1e06602f0dae4de
SSDEEP

3072:CMftffjmNi8czzbjwY6c/gnNVitAsCx7nPQOH0uLHNjMl:CUVfjmNOz3wY6c/SN0nuSAy

Score

7^/10

Malware Config

Targets

- Target
  
  0014549b07099d35bd02e85b42cf07c36bc289e56d36b3aa3a38d356e2609080
- Size
  
  209KB
- MD5
  
  d46c2e4f139469026284838b2dbc76f8
- SHA1
  
  dc7f2fa37c047e93ae1e5c913f0cfd7c03d5ac84
- SHA256
  
  0014549b07099d35bd02e85b42cf07c36bc289e56d36b3aa3a38d356e2609080
- SHA512
  
  47b225a4b6265521dca53794cb53920802065a46683fbd047c029d13350c14bae263129446843a55481cadc076e3d26ffd63869dec553c67d1e06602f0dae4de
- SSDEEP
  
  3072:CMftffjmNi8czzbjwY6c/gnNVitAsCx7nPQOH0uLHNjMl:CUVfjmNOz3wY6c/SN0nuSAy
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2