6ced9b3330ad2c372902c1b38136fc3d0aeccdd1a916c8cfd0a809c1b06648ae | Triage

Sharing

General

Target

6ced9b3330ad2c372902c1b38136fc3d0aeccdd1a916c8cfd0a809c1b06648ae
Size

563KB
Sample

240418-cfspxsgb88
MD5

bf16e6d74a05f748114cb53b6f4e7ec4
SHA1

ee9bf89b1864d581f9c7062931e26ab8466fcfdd
SHA256

6ced9b3330ad2c372902c1b38136fc3d0aeccdd1a916c8cfd0a809c1b06648ae
SHA512

e85b42a387dfbc384c768579ada7ad93059de89400cb77cd17fbd56a0cbbab321b9ee8e92dfeab5e3fcd62d873dfa19efb1590f1a20c659a4f398fb3600fc520
SSDEEP

12288:Y7+gLc+Gl3DflwlLrfw+fZdI+eN9K61cNiSvSGtTnOmyMcp7YJhnRw:Y7Dc+qILkOdIdcN/vvtTObMceJhRw

Score

7^/10

Malware Config

Targets

- Target
  
  6ced9b3330ad2c372902c1b38136fc3d0aeccdd1a916c8cfd0a809c1b06648ae
- Size
  
  563KB
- MD5
  
  bf16e6d74a05f748114cb53b6f4e7ec4
- SHA1
  
  ee9bf89b1864d581f9c7062931e26ab8466fcfdd
- SHA256
  
  6ced9b3330ad2c372902c1b38136fc3d0aeccdd1a916c8cfd0a809c1b06648ae
- SHA512
  
  e85b42a387dfbc384c768579ada7ad93059de89400cb77cd17fbd56a0cbbab321b9ee8e92dfeab5e3fcd62d873dfa19efb1590f1a20c659a4f398fb3600fc520
- SSDEEP
  
  12288:Y7+gLc+Gl3DflwlLrfw+fZdI+eN9K61cNiSvSGtTnOmyMcp7YJhnRw:Y7Dc+qILkOdIdcN/vvtTObMceJhRw
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2