4c9b227230b5ee98b40a05f98a03e5cc855761827a32316a6eedb156f8ed0b6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c9b227230b5ee98b40a05f98a03e5cc855761827a32316a6eedb156f8ed0b6e
Size

104KB
Sample

240228-c1r9wshb8v
MD5

32f883f1a2b1757582b2e41ad74f9f27
SHA1

96c7f8b0d6fdee097140c77f1d9d421ecd8c5d8a
SHA256

4c9b227230b5ee98b40a05f98a03e5cc855761827a32316a6eedb156f8ed0b6e
SHA512

55d21e9b0f7ff413f279498ab36ca54efe39bd5751732a0727f3b95c4d4bcfb96d00178c784fbb4f342dc9c443e7f19db1e4db26ecc4534bb2eda1f79cb1cbdf
SSDEEP

3072:SftffjmNruuKxHSbz07u4zjJY251dZmxq4hi9ezOhu9vPt:iVfjmNAHSb45dZWqdezOhI

Score

7^/10

Malware Config

Targets

- Target
  
  4c9b227230b5ee98b40a05f98a03e5cc855761827a32316a6eedb156f8ed0b6e
- Size
  
  104KB
- MD5
  
  32f883f1a2b1757582b2e41ad74f9f27
- SHA1
  
  96c7f8b0d6fdee097140c77f1d9d421ecd8c5d8a
- SHA256
  
  4c9b227230b5ee98b40a05f98a03e5cc855761827a32316a6eedb156f8ed0b6e
- SHA512
  
  55d21e9b0f7ff413f279498ab36ca54efe39bd5751732a0727f3b95c4d4bcfb96d00178c784fbb4f342dc9c443e7f19db1e4db26ecc4534bb2eda1f79cb1cbdf
- SSDEEP
  
  3072:SftffjmNruuKxHSbz07u4zjJY251dZmxq4hi9ezOhu9vPt:iVfjmNAHSb45dZWqdezOhI
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2