General

  • Target

    echo.exe

  • Size

    23KB

  • Sample

    240513-jmycbaga72

  • MD5

    c8e9a8a95137aedbf876af2a3f6037ba

  • SHA1

    8491ecc6270dc00fa835d40980c272e6df089e07

  • SHA256

    e6c5bdbf77148da9e3a530c51a074c13b17cc2cb7ccf24e92a5ac20f4d9d96dd

  • SHA512

    898a06ba0f30407f4ab0adf6eab5741bfbdbdfe442461ddb1d00786da6378aa2780df9768ee7ae3071d8996534327ecd7e3fc75a59649c3ab77a47e2aa135e19

  • SSDEEP

    384:yShi9boJkNcDT8W3TpMpBkW3TpMpBPLq9zDqnNQDOBgmZVdJdEG6coQFh2zW3Tps:QoJkmTVVwVisDqniyBgo0GlojkVSN

Malware Config

Targets

    • Target

      echo.exe

    • Size

      23KB

    • MD5

      c8e9a8a95137aedbf876af2a3f6037ba

    • SHA1

      8491ecc6270dc00fa835d40980c272e6df089e07

    • SHA256

      e6c5bdbf77148da9e3a530c51a074c13b17cc2cb7ccf24e92a5ac20f4d9d96dd

    • SHA512

      898a06ba0f30407f4ab0adf6eab5741bfbdbdfe442461ddb1d00786da6378aa2780df9768ee7ae3071d8996534327ecd7e3fc75a59649c3ab77a47e2aa135e19

    • SSDEEP

      384:yShi9boJkNcDT8W3TpMpBkW3TpMpBPLq9zDqnNQDOBgmZVdJdEG6coQFh2zW3Tps:QoJkmTVVwVisDqniyBgo0GlojkVSN

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks