170dcbdeab9901f2bd76eb3c026ff8577bcf1b8a6b5e1777edfcafe91c32eeb6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

170dcbdeab9901f2bd76eb3c026ff8577bcf1b8a6b5e1777edfcafe91c32eeb6
Size

1.8MB
Sample

240417-xecyasae68
MD5

24c957a05d52e7dd53a793cfffb9b5ee
SHA1

c4584c1a98188905172d4ff2c54764c752e9974f
SHA256

170dcbdeab9901f2bd76eb3c026ff8577bcf1b8a6b5e1777edfcafe91c32eeb6
SHA512

e936629615de71f87beb44fd8b085b272cb392b83ef02ea4661fdf66651f0c612c38367a832caaad7137ca5cf7f83c2c4d890a00e4d00bae3f1e7ad098e514bb
SSDEEP

49152:w71GXBMpaHgNYdFuDDNsz3LquRD/sLTRE7Y22:eGXBy0dYDDNszJRD/sLT06

Score

7^/10

Malware Config

Targets

- Target
  
  170dcbdeab9901f2bd76eb3c026ff8577bcf1b8a6b5e1777edfcafe91c32eeb6
- Size
  
  1.8MB
- MD5
  
  24c957a05d52e7dd53a793cfffb9b5ee
- SHA1
  
  c4584c1a98188905172d4ff2c54764c752e9974f
- SHA256
  
  170dcbdeab9901f2bd76eb3c026ff8577bcf1b8a6b5e1777edfcafe91c32eeb6
- SHA512
  
  e936629615de71f87beb44fd8b085b272cb392b83ef02ea4661fdf66651f0c612c38367a832caaad7137ca5cf7f83c2c4d890a00e4d00bae3f1e7ad098e514bb
- SSDEEP
  
  49152:w71GXBMpaHgNYdFuDDNsz3LquRD/sLTRE7Y22:eGXBy0dYDDNszJRD/sLT06
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2