93cf5d7e98151fa9e2b6f70bfed469b2a9335cf230e850a85840a19d626e9010 | Triage

Sharing

General

Target

93cf5d7e98151fa9e2b6f70bfed469b2a9335cf230e850a85840a19d626e9010
Size

15.2MB
Sample

240523-f9ddwafc94
MD5

985bf5ea0baf3b70bf3cc3193e122b3f
SHA1

39120011c3aabfd974577d963b38f327b355b153
SHA256

93cf5d7e98151fa9e2b6f70bfed469b2a9335cf230e850a85840a19d626e9010
SHA512

3ab343d2b8b28ce222f09eb56b7b07cad99ef9342a6d6c8e0c82c809a4f3798d6da2d119de9bdc8aa4369f09404b4ab89de72181a77127cac8e0c9a453722284
SSDEEP

393216:cZCRT1HucT3vd2y6iPecEUPdUpIIIqBYlS:CaHhTvd2yzecEUeeII0OS

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  93cf5d7e98151fa9e2b6f70bfed469b2a9335cf230e850a85840a19d626e9010
- Size
  
  15.2MB
- MD5
  
  985bf5ea0baf3b70bf3cc3193e122b3f
- SHA1
  
  39120011c3aabfd974577d963b38f327b355b153
- SHA256
  
  93cf5d7e98151fa9e2b6f70bfed469b2a9335cf230e850a85840a19d626e9010
- SHA512
  
  3ab343d2b8b28ce222f09eb56b7b07cad99ef9342a6d6c8e0c82c809a4f3798d6da2d119de9bdc8aa4369f09404b4ab89de72181a77127cac8e0c9a453722284
- SSDEEP
  
  393216:cZCRT1HucT3vd2y6iPecEUPdUpIIIqBYlS:CaHhTvd2yzecEUeeII0OS
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2