bd9fdd834dc3df529b9ea1ebcdcc8715f2007b65e2636a7acd59ab343cbeeffc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd9fdd834dc3df529b9ea1ebcdcc8715f2007b65e2636a7acd59ab343cbeeffc
Size

280KB
Sample

240227-yj51bahh85
MD5

64c953c92703fc28866ecd9de1a00fe5
SHA1

25fcff0b3961e8af1dcdf7ad9dc2cd4429570027
SHA256

bd9fdd834dc3df529b9ea1ebcdcc8715f2007b65e2636a7acd59ab343cbeeffc
SHA512

c114295d238d9848d41e6e338758bb36382569bd84a66000d9e4978b7e650ab8500d5997d27bc200de0cd401e7397fa8ea0c94e93d67a034142433aaeb4d9a7d
SSDEEP

6144:YVfjmN3hfgI3FStrsHkaMaVXu8Mz4xYdr1e2MHVuYLt8yf/Y7OOby:C7+9gI1CsEaMt9A2MHVuYR8yf/YBby

Score

7^/10

Malware Config

Targets

- Target
  
  bd9fdd834dc3df529b9ea1ebcdcc8715f2007b65e2636a7acd59ab343cbeeffc
- Size
  
  280KB
- MD5
  
  64c953c92703fc28866ecd9de1a00fe5
- SHA1
  
  25fcff0b3961e8af1dcdf7ad9dc2cd4429570027
- SHA256
  
  bd9fdd834dc3df529b9ea1ebcdcc8715f2007b65e2636a7acd59ab343cbeeffc
- SHA512
  
  c114295d238d9848d41e6e338758bb36382569bd84a66000d9e4978b7e650ab8500d5997d27bc200de0cd401e7397fa8ea0c94e93d67a034142433aaeb4d9a7d
- SSDEEP
  
  6144:YVfjmN3hfgI3FStrsHkaMaVXu8Mz4xYdr1e2MHVuYLt8yf/Y7OOby:C7+9gI1CsEaMt9A2MHVuYR8yf/YBby
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2