d35361b3e6661a2efe6daf14180739b68629cb6207388bc7491822ba7cea4c1e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d35361b3e6661a2efe6daf14180739b68629cb6207388bc7491822ba7cea4c1e
Size

132KB
Sample

240228-zpnhwsde9y
MD5

a042a8a24b4075a0e3073f00ec52d539
SHA1

78357d317271978135d362f66da2a77540a189f9
SHA256

d35361b3e6661a2efe6daf14180739b68629cb6207388bc7491822ba7cea4c1e
SHA512

9b3f075a1cf1981bd4e5937dd3aa1966136c6712d2ce242edf8dec6b0922fa216f3c1e2103217ebca99ce1a13aa4bcbb7d2b8bd172d0464061b1074f5064df88
SSDEEP

3072:fftffjmNhPvU2Jk0KPhNqoBjrb4dqBG8yWAZOkh1gwLjLX:HVfjmNhPvpi0K5NNBjrb0kGlbOkhj

Score

7^/10

Malware Config

Targets

- Target
  
  d35361b3e6661a2efe6daf14180739b68629cb6207388bc7491822ba7cea4c1e
- Size
  
  132KB
- MD5
  
  a042a8a24b4075a0e3073f00ec52d539
- SHA1
  
  78357d317271978135d362f66da2a77540a189f9
- SHA256
  
  d35361b3e6661a2efe6daf14180739b68629cb6207388bc7491822ba7cea4c1e
- SHA512
  
  9b3f075a1cf1981bd4e5937dd3aa1966136c6712d2ce242edf8dec6b0922fa216f3c1e2103217ebca99ce1a13aa4bcbb7d2b8bd172d0464061b1074f5064df88
- SSDEEP
  
  3072:fftffjmNhPvU2Jk0KPhNqoBjrb4dqBG8yWAZOkh1gwLjLX:HVfjmNhPvpi0K5NNBjrb0kGlbOkhj
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2