195d3161d0106e8ff372d278078e013dd6edcbed72b8470b652866eba00d0a1c | Triage

Sharing

General

Target

195d3161d0106e8ff372d278078e013dd6edcbed72b8470b652866eba00d0a1c
Size

132KB
Sample

240418-fk2p6sbg33
MD5

d6a2161f0f8bfc55efd2ad1ac72db0ea
SHA1

9aa9953256bbff14a039b846b7376ff211da95f9
SHA256

195d3161d0106e8ff372d278078e013dd6edcbed72b8470b652866eba00d0a1c
SHA512

67f997de91af8e76ade2b995fb1b3b55a96f2b4ba8cf1bc0d8bd1cd29877909d5c5efee3531eeb9336b67e67b49a1cf7ef18b76c57911ec1f2ed09b4cf964e65
SSDEEP

3072:qftffjmNpER5AhC48S1m2YPrh4qR8vdZksB+Dkdqg:qVfjmNpEXAe6QPGksB+QY

Score

7^/10

Malware Config

Targets

- Target
  
  195d3161d0106e8ff372d278078e013dd6edcbed72b8470b652866eba00d0a1c
- Size
  
  132KB
- MD5
  
  d6a2161f0f8bfc55efd2ad1ac72db0ea
- SHA1
  
  9aa9953256bbff14a039b846b7376ff211da95f9
- SHA256
  
  195d3161d0106e8ff372d278078e013dd6edcbed72b8470b652866eba00d0a1c
- SHA512
  
  67f997de91af8e76ade2b995fb1b3b55a96f2b4ba8cf1bc0d8bd1cd29877909d5c5efee3531eeb9336b67e67b49a1cf7ef18b76c57911ec1f2ed09b4cf964e65
- SSDEEP
  
  3072:qftffjmNpER5AhC48S1m2YPrh4qR8vdZksB+Dkdqg:qVfjmNpEXAe6QPGksB+QY
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2