27be22589a1f20622b7fe435e609382b46c7fed57e85ae540670313fac634ee8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27be22589a1f20622b7fe435e609382b46c7fed57e85ae540670313fac634ee8
Size

1.7MB
Sample

240328-wt3xlacf8y
MD5

13a79e4f83ad3a38222778f6bd4265ef
SHA1

c12024059ee8fed82a05ea3e2706ed8875324843
SHA256

27be22589a1f20622b7fe435e609382b46c7fed57e85ae540670313fac634ee8
SHA512

ecae2c9ff7173828c1398c925252d66de8ae598a820e7f08791b5aeccc2aa6a894c3b118fc7dda596e1a0dc3d2d6573b03e766001a585d3eca7389bde41f65b7
SSDEEP

49152:M7qO9791XV68jeHlGIwMrc4eEgEX6it3MHII4bzu0:GNXdglGIwMrxe/EqiwIIIv

Score

7^/10

Malware Config

Targets

- Target
  
  27be22589a1f20622b7fe435e609382b46c7fed57e85ae540670313fac634ee8
- Size
  
  1.7MB
- MD5
  
  13a79e4f83ad3a38222778f6bd4265ef
- SHA1
  
  c12024059ee8fed82a05ea3e2706ed8875324843
- SHA256
  
  27be22589a1f20622b7fe435e609382b46c7fed57e85ae540670313fac634ee8
- SHA512
  
  ecae2c9ff7173828c1398c925252d66de8ae598a820e7f08791b5aeccc2aa6a894c3b118fc7dda596e1a0dc3d2d6573b03e766001a585d3eca7389bde41f65b7
- SSDEEP
  
  49152:M7qO9791XV68jeHlGIwMrc4eEgEX6it3MHII4bzu0:GNXdglGIwMrxe/EqiwIIIv
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2