6cf537f5f7cfa22faa985ecfe1e6bbe871930720ec5b1d16b5a4381db3010e5b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6cf537f5f7cfa22faa985ecfe1e6bbe871930720ec5b1d16b5a4381db3010e5b
Size

5.7MB
Sample

240425-gaggxsgb48
MD5

59c060162e59d97cbe0810e35c46c8c5
SHA1

74be123984b9c587aa136c4fb70bc488ae242eda
SHA256

6cf537f5f7cfa22faa985ecfe1e6bbe871930720ec5b1d16b5a4381db3010e5b
SHA512

7d08f0654f51460b9549f8f5ca03c9aba47c7888898f7606da45763e7d3d265e754d5f94b972ae73726533268cce4b6ff1434d1274cbf98ee1cdfe2af0b16831
SSDEEP

49152:3Pv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBJ:PKUgTH2M2m9UMpu1QfLczqssnKSk

Score

7^/10

Malware Config

Targets

- Target
  
  6cf537f5f7cfa22faa985ecfe1e6bbe871930720ec5b1d16b5a4381db3010e5b
- Size
  
  5.7MB
- MD5
  
  59c060162e59d97cbe0810e35c46c8c5
- SHA1
  
  74be123984b9c587aa136c4fb70bc488ae242eda
- SHA256
  
  6cf537f5f7cfa22faa985ecfe1e6bbe871930720ec5b1d16b5a4381db3010e5b
- SHA512
  
  7d08f0654f51460b9549f8f5ca03c9aba47c7888898f7606da45763e7d3d265e754d5f94b972ae73726533268cce4b6ff1434d1274cbf98ee1cdfe2af0b16831
- SSDEEP
  
  49152:3Pv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBJ:PKUgTH2M2m9UMpu1QfLczqssnKSk
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2