20ec6eb479ce5033b2bb496319a125c19d76a43a547624cf140daa1470f1800d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20ec6eb479ce5033b2bb496319a125c19d76a43a547624cf140daa1470f1800d
Size

251KB
Sample

240225-jhhfasfa26
MD5

90fea2f5833c468575d5369841869659
SHA1

408b2c321d3673018860ddc03488257d27e04908
SHA256

20ec6eb479ce5033b2bb496319a125c19d76a43a547624cf140daa1470f1800d
SHA512

4c9c998236ca1490171c9b3e697e52f52165c286716b3d19e0ba1250dba44dc741f0e78509a1831d40122c0de978b03943bcc68b1e764a9df6ad64997b44f0f4
SSDEEP

6144:2fyVfjmNHgiC4bXqsTk90qC1AOb7eswf1Px++fD8PJ:2fM7+AitXqsTkiR7twRx+gD8PJ

Score

7^/10

Malware Config

Targets

- Target
  
  20ec6eb479ce5033b2bb496319a125c19d76a43a547624cf140daa1470f1800d
- Size
  
  251KB
- MD5
  
  90fea2f5833c468575d5369841869659
- SHA1
  
  408b2c321d3673018860ddc03488257d27e04908
- SHA256
  
  20ec6eb479ce5033b2bb496319a125c19d76a43a547624cf140daa1470f1800d
- SHA512
  
  4c9c998236ca1490171c9b3e697e52f52165c286716b3d19e0ba1250dba44dc741f0e78509a1831d40122c0de978b03943bcc68b1e764a9df6ad64997b44f0f4
- SSDEEP
  
  6144:2fyVfjmNHgiC4bXqsTk90qC1AOb7eswf1Px++fD8PJ:2fM7+AitXqsTkiR7twRx+gD8PJ
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2