05de2f954afc3a5246d5b609197ca9f49d26517980de3da147f0adebe925c5d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05de2f954afc3a5246d5b609197ca9f49d26517980de3da147f0adebe925c5d0
Size

1.8MB
Sample

240418-arzaqscc69
MD5

f524ca8a9000faad575f8c14c85dfb09
SHA1

f68d9961e54552381246332c80483f1d3a724384
SHA256

05de2f954afc3a5246d5b609197ca9f49d26517980de3da147f0adebe925c5d0
SHA512

20d9b3ee6a2ce7e26fbfecd1749bbaa14c5a12fd23b1710bb74750706d1a30a0189f9d181a2cb11622b60399e57a90f1dbb3128ed7b6ab9021f5a4c05b8545f5
SSDEEP

49152:fgQt30B3uA8EYHCree1uksbraFShGJ0WkA5:fBt32u51HCri+ss5

Score

7^/10

Malware Config

Targets

- Target
  
  05de2f954afc3a5246d5b609197ca9f49d26517980de3da147f0adebe925c5d0
- Size
  
  1.8MB
- MD5
  
  f524ca8a9000faad575f8c14c85dfb09
- SHA1
  
  f68d9961e54552381246332c80483f1d3a724384
- SHA256
  
  05de2f954afc3a5246d5b609197ca9f49d26517980de3da147f0adebe925c5d0
- SHA512
  
  20d9b3ee6a2ce7e26fbfecd1749bbaa14c5a12fd23b1710bb74750706d1a30a0189f9d181a2cb11622b60399e57a90f1dbb3128ed7b6ab9021f5a4c05b8545f5
- SSDEEP
  
  49152:fgQt30B3uA8EYHCree1uksbraFShGJ0WkA5:fBt32u51HCri+ss5
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2