12127e1a505452f2476e535000783f803722e9bfb9efae49b906df8669af1980 | Triage

Sharing

General

Target

12127e1a505452f2476e535000783f803722e9bfb9efae49b906df8669af1980
Size

140KB
Sample

240228-x9gjzaca2x
MD5

0a7a4f6fc64026bdf28b41d4d033a0cc
SHA1

1e8c8ab26094e3fa220a2706f3cdba4488149d5f
SHA256

12127e1a505452f2476e535000783f803722e9bfb9efae49b906df8669af1980
SHA512

2af6f32505d705ab9bdd9f78c68c74a73589e9912515612c15b94c3447cab444c780871e5714a806670ddd1036f1ac55af555a925ab620bf45b6d7b80006d80c
SSDEEP

3072:SftffjmNusOfCOv//kxBsg87j914yBHlMKTaEUk:iVfjmNvOzvkxOg87gyBHldU

Score

7^/10

Malware Config

Targets

- Target
  
  12127e1a505452f2476e535000783f803722e9bfb9efae49b906df8669af1980
- Size
  
  140KB
- MD5
  
  0a7a4f6fc64026bdf28b41d4d033a0cc
- SHA1
  
  1e8c8ab26094e3fa220a2706f3cdba4488149d5f
- SHA256
  
  12127e1a505452f2476e535000783f803722e9bfb9efae49b906df8669af1980
- SHA512
  
  2af6f32505d705ab9bdd9f78c68c74a73589e9912515612c15b94c3447cab444c780871e5714a806670ddd1036f1ac55af555a925ab620bf45b6d7b80006d80c
- SSDEEP
  
  3072:SftffjmNusOfCOv//kxBsg87j914yBHlMKTaEUk:iVfjmNvOzvkxOg87gyBHldU
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2