ef5bb5c9a2c61d8fa6b89404b3b4f7ce3ff34ba90e6f81418c0c2d77fde2b270 | Triage

Sharing

General

Target

ef5bb5c9a2c61d8fa6b89404b3b4f7ce3ff34ba90e6f81418c0c2d77fde2b270
Size

66KB
Sample

240428-pevjcafh4y
MD5

3e640e8d94f550645cef5f4a5470444a
SHA1

79da42a47feabb28f56f53f14af567a28bde515f
SHA256

ef5bb5c9a2c61d8fa6b89404b3b4f7ce3ff34ba90e6f81418c0c2d77fde2b270
SHA512

b4bbb5eabe22e1f738aa568179f4821c3ad08eeaf544fbad1247be83290c69c8397e8f0e16e25e93644fe26f8c42a58c672e1a92178da7e5de52dc37c0897ef9
SSDEEP

768:pVd16GVRu1yK9fMnJG2V9dHS8HNic1iTEpgSG9TJVQBWZrvW5TNDWfKgUkKtzYiP:pN3SHuJV9NBriw+d9bHrkT5gUHz7FxtJ

Score

7^/10

Malware Config

Targets

- Target
  
  ef5bb5c9a2c61d8fa6b89404b3b4f7ce3ff34ba90e6f81418c0c2d77fde2b270
- Size
  
  66KB
- MD5
  
  3e640e8d94f550645cef5f4a5470444a
- SHA1
  
  79da42a47feabb28f56f53f14af567a28bde515f
- SHA256
  
  ef5bb5c9a2c61d8fa6b89404b3b4f7ce3ff34ba90e6f81418c0c2d77fde2b270
- SHA512
  
  b4bbb5eabe22e1f738aa568179f4821c3ad08eeaf544fbad1247be83290c69c8397e8f0e16e25e93644fe26f8c42a58c672e1a92178da7e5de52dc37c0897ef9
- SSDEEP
  
  768:pVd16GVRu1yK9fMnJG2V9dHS8HNic1iTEpgSG9TJVQBWZrvW5TNDWfKgUkKtzYiP:pN3SHuJV9NBriw+d9bHrkT5gUHz7FxtJ
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2