fa18e10af4ef35d0e8d9967d587b7a9be2b9c6f983b337675e317011f5d6b31f | Triage

Sharing

General

Target

fa18e10af4ef35d0e8d9967d587b7a9be2b9c6f983b337675e317011f5d6b31f
Size

3.0MB
Sample

240418-gnvayaed4y
MD5

f6f14b2e7da58a8b03216e62f9669a00
SHA1

6f631a93440aca643b8762c4b6ad35882e1dfdaa
SHA256

fa18e10af4ef35d0e8d9967d587b7a9be2b9c6f983b337675e317011f5d6b31f
SHA512

87a3867a6405534cdd819dda7b79e01a701abe28722f2267293ce6a9326598ea2bf76b6a8940e75f2cb65fc476e5c6c152a655cdd6ed2fdc13f36d6f4f0d2ab0
SSDEEP

49152:w7cDNdGSJX4DJ5OSt0CE86GD68BpvvcIoxhhZzlDz9NT7cnbrhcPM:Vjicx868XvcXZNTsF

Score

7^/10

Malware Config

Targets

- Target
  
  fa18e10af4ef35d0e8d9967d587b7a9be2b9c6f983b337675e317011f5d6b31f
- Size
  
  3.0MB
- MD5
  
  f6f14b2e7da58a8b03216e62f9669a00
- SHA1
  
  6f631a93440aca643b8762c4b6ad35882e1dfdaa
- SHA256
  
  fa18e10af4ef35d0e8d9967d587b7a9be2b9c6f983b337675e317011f5d6b31f
- SHA512
  
  87a3867a6405534cdd819dda7b79e01a701abe28722f2267293ce6a9326598ea2bf76b6a8940e75f2cb65fc476e5c6c152a655cdd6ed2fdc13f36d6f4f0d2ab0
- SSDEEP
  
  49152:w7cDNdGSJX4DJ5OSt0CE86GD68BpvvcIoxhhZzlDz9NT7cnbrhcPM:Vjicx868XvcXZNTsF
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2