1ab62e4380db35f928195151ae7dc9ce49822735c32bb204dbc70efce1effcdb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ab62e4380db35f928195151ae7dc9ce49822735c32bb204dbc70efce1effcdb.exe
Size

25KB
Sample

240530-bepq7shf29
MD5

df3d30ca2e5a619954e0996f40bf8d2d
SHA1

eab5b79a29c194793fc45bcedcd2fe0b0b941ddb
SHA256

1ab62e4380db35f928195151ae7dc9ce49822735c32bb204dbc70efce1effcdb
SHA512

37d1fdac89355145efa06fd61cbab8218dbc5501ab28a895ff3e65f9f46cd4586dadbd4f22ec299fa9840caeb4c30854098d42ec1c45ae72a1a54db463a03b0c
SSDEEP

768:3EHP8dBn3HQVOaoM41v1hbV7dgm3Hrda:3EHP8dyIZttdX3w

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  
  1ab62e4380db35f928195151ae7dc9ce49822735c32bb204dbc70efce1effcdb.exe
- Size
  
  25KB
- MD5
  
  df3d30ca2e5a619954e0996f40bf8d2d
- SHA1
  
  eab5b79a29c194793fc45bcedcd2fe0b0b941ddb
- SHA256
  
  1ab62e4380db35f928195151ae7dc9ce49822735c32bb204dbc70efce1effcdb
- SHA512
  
  37d1fdac89355145efa06fd61cbab8218dbc5501ab28a895ff3e65f9f46cd4586dadbd4f22ec299fa9840caeb4c30854098d42ec1c45ae72a1a54db463a03b0c
- SSDEEP
  
  768:3EHP8dBn3HQVOaoM41v1hbV7dgm3Hrda:3EHP8dyIZttdX3w
Score

7^/10

discovery execution
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
- Use of msiexec (install) with remote resource
- Blocklisted process makes network request
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryexecution