2bbe083f838b018056d3ed42753817b89cad7a1e8f18ffe0c311b15024c25f14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bbe083f838b018056d3ed42753817b89cad7a1e8f18ffe0c311b15024c25f14
Size

2.3MB
Sample

240417-tgy2rsgc51
MD5

148fe7eb7fcbbd51e35661dbd2f74c0e
SHA1

568488774edccb9e43fc61666e5bd340d7135bfd
SHA256

2bbe083f838b018056d3ed42753817b89cad7a1e8f18ffe0c311b15024c25f14
SHA512

5ec19cb44715386f72a163b2acf7de6f921abbf30722714ddd5aa6757c179d942ed94ee5fe82db3577b38fd7550c79b530f966fda29f8edd90afbb6e46c48533
SSDEEP

49152:b7KQN2skpzPXDFBjWRJTCAIHuDeeaJ98mjRC9YC2Ns+/X0h54GEewKk:i62bz/5YvpI2eey98CRC4L0ZRbk

Score

7^/10

Malware Config

Targets

- Target
  
  2bbe083f838b018056d3ed42753817b89cad7a1e8f18ffe0c311b15024c25f14
- Size
  
  2.3MB
- MD5
  
  148fe7eb7fcbbd51e35661dbd2f74c0e
- SHA1
  
  568488774edccb9e43fc61666e5bd340d7135bfd
- SHA256
  
  2bbe083f838b018056d3ed42753817b89cad7a1e8f18ffe0c311b15024c25f14
- SHA512
  
  5ec19cb44715386f72a163b2acf7de6f921abbf30722714ddd5aa6757c179d942ed94ee5fe82db3577b38fd7550c79b530f966fda29f8edd90afbb6e46c48533
- SSDEEP
  
  49152:b7KQN2skpzPXDFBjWRJTCAIHuDeeaJ98mjRC9YC2Ns+/X0h54GEewKk:i62bz/5YvpI2eey98CRC4L0ZRbk
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2