ff0debdae39c97d32e7a2283d369222298a3d4ba99ba8a083172ebed52631f9c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff0debdae39c97d32e7a2283d369222298a3d4ba99ba8a083172ebed52631f9c
Size

276KB
Sample

240418-anxbzada7y
MD5

a1c3845f2b9c9083812665b7730b60f6
SHA1

fa22f42d3798dae6a382c231ba1cdfdaa1fc7f74
SHA256

ff0debdae39c97d32e7a2283d369222298a3d4ba99ba8a083172ebed52631f9c
SHA512

8d1866c80844a5285af4706a2b41dc3ea033786b5d95da94319d9184414ab44911e5d8419179787681b9fa8ca8dbf73e8c468e2857553c311d85ddd827c3da39
SSDEEP

6144:eVfjmNdVHNenR884rpXt476rjkdhgBFOPJJqe4:g7+dVtenR8bxq7dhgBFOHF4

Score

7^/10

Malware Config

Targets

- Target
  
  ff0debdae39c97d32e7a2283d369222298a3d4ba99ba8a083172ebed52631f9c
- Size
  
  276KB
- MD5
  
  a1c3845f2b9c9083812665b7730b60f6
- SHA1
  
  fa22f42d3798dae6a382c231ba1cdfdaa1fc7f74
- SHA256
  
  ff0debdae39c97d32e7a2283d369222298a3d4ba99ba8a083172ebed52631f9c
- SHA512
  
  8d1866c80844a5285af4706a2b41dc3ea033786b5d95da94319d9184414ab44911e5d8419179787681b9fa8ca8dbf73e8c468e2857553c311d85ddd827c3da39
- SSDEEP
  
  6144:eVfjmNdVHNenR884rpXt476rjkdhgBFOPJJqe4:g7+dVtenR8bxq7dhgBFOHF4
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2