78e9621a7f65a9277c1861f00b59d0a0a8ea2b93b9991a6cc97e27519461ddd9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78e9621a7f65a9277c1861f00b59d0a0a8ea2b93b9991a6cc97e27519461ddd9
Size

910KB
Sample

240418-kfv42shd8y
MD5

a129bfde8e59e0dfbb92f9dd2b061b8b
SHA1

cb788098633a64a4288b4ec219baec07cf695e69
SHA256

78e9621a7f65a9277c1861f00b59d0a0a8ea2b93b9991a6cc97e27519461ddd9
SHA512

806e1c34df07c7c320117fc19b70753dca6cc6544d5a04d0480592645c3a3feeab91e709fa3fab2fa04ba9d233cbb173c8f9556de5b6e25740cf11aee64a4c17
SSDEEP

12288:abvnf8UaJEjEKUBKuJyECjDW76LS/Uc7xX0gmbKgPdr/uduQXqOFuzsj5uJZv355:WvoTKUsEyEyK+LS3g9KXqKtu73aBi

Score

7^/10

Malware Config

Targets

- Target
  
  78e9621a7f65a9277c1861f00b59d0a0a8ea2b93b9991a6cc97e27519461ddd9
- Size
  
  910KB
- MD5
  
  a129bfde8e59e0dfbb92f9dd2b061b8b
- SHA1
  
  cb788098633a64a4288b4ec219baec07cf695e69
- SHA256
  
  78e9621a7f65a9277c1861f00b59d0a0a8ea2b93b9991a6cc97e27519461ddd9
- SHA512
  
  806e1c34df07c7c320117fc19b70753dca6cc6544d5a04d0480592645c3a3feeab91e709fa3fab2fa04ba9d233cbb173c8f9556de5b6e25740cf11aee64a4c17
- SSDEEP
  
  12288:abvnf8UaJEjEKUBKuJyECjDW76LS/Uc7xX0gmbKgPdr/uduQXqOFuzsj5uJZv355:WvoTKUsEyEyK+LS3g9KXqKtu73aBi
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2