5c91e115c619362d014ce8676a7438c355359c141ab91a69d47896c69afd5bfa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c91e115c619362d014ce8676a7438c355359c141ab91a69d47896c69afd5bfa
Size

254KB
Sample

240425-smn83sbh88
MD5

1a9c4e063f42cd0590dc8b782c4da37e
SHA1

75aa45e3d0fbfabca7fffea81c9b33d6be837398
SHA256

5c91e115c619362d014ce8676a7438c355359c141ab91a69d47896c69afd5bfa
SHA512

7bd6b584777381a841aa5c32d996dc407cca94b0d795f0a4131bf373605fa6f2dc0dbdc62c1aff149a65a4fa58d1baf310f05824eb123bc2c88f525a5ec148d4
SSDEEP

6144:duJQgiC4bXqsTk90qC1AOb7eswf1Px++fD8PJ:CitXqsTkiR7twRx+gD8PJ

Score

7^/10

Malware Config

Targets

- Target
  
  5c91e115c619362d014ce8676a7438c355359c141ab91a69d47896c69afd5bfa
- Size
  
  254KB
- MD5
  
  1a9c4e063f42cd0590dc8b782c4da37e
- SHA1
  
  75aa45e3d0fbfabca7fffea81c9b33d6be837398
- SHA256
  
  5c91e115c619362d014ce8676a7438c355359c141ab91a69d47896c69afd5bfa
- SHA512
  
  7bd6b584777381a841aa5c32d996dc407cca94b0d795f0a4131bf373605fa6f2dc0dbdc62c1aff149a65a4fa58d1baf310f05824eb123bc2c88f525a5ec148d4
- SSDEEP
  
  6144:duJQgiC4bXqsTk90qC1AOb7eswf1Px++fD8PJ:CitXqsTkiR7twRx+gD8PJ
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2