e1406e72bf03ad8425c506c4368dd0df4cf18f0de199e20dbcc8248b48b553dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1406e72bf03ad8425c506c4368dd0df4cf18f0de199e20dbcc8248b48b553dc
Size

11.2MB
Sample

240712-r27taszfpd
MD5

0786785dcc8eefed3bf6d1be81724bfb
SHA1

b55e62dbae407a40f8570c3f03dc1f2d4a4698cd
SHA256

e1406e72bf03ad8425c506c4368dd0df4cf18f0de199e20dbcc8248b48b553dc
SHA512

cd7a208d9e35650727dc2d0cbdf654e4e96fabbd84e7c0f3a684fb0b99107bfd7b099320099522523115e819e0e4f5a0b1af3a7dd00b8ddf4d77efe2eadf83c2
SSDEEP

196608:3QTSLXg64BfMDg67F42hc4W8KbhUjEsnloEhFKeCoa7Gv6snkMyv:QEXghBfMDg8F4qW8KbQNljP87G5Vyv

Score

7^/10

execution

Malware Config

Targets

- Target
  
  e1406e72bf03ad8425c506c4368dd0df4cf18f0de199e20dbcc8248b48b553dc
- Size
  
  11.2MB
- MD5
  
  0786785dcc8eefed3bf6d1be81724bfb
- SHA1
  
  b55e62dbae407a40f8570c3f03dc1f2d4a4698cd
- SHA256
  
  e1406e72bf03ad8425c506c4368dd0df4cf18f0de199e20dbcc8248b48b553dc
- SHA512
  
  cd7a208d9e35650727dc2d0cbdf654e4e96fabbd84e7c0f3a684fb0b99107bfd7b099320099522523115e819e0e4f5a0b1af3a7dd00b8ddf4d77efe2eadf83c2
- SSDEEP
  
  196608:3QTSLXg64BfMDg67F42hc4W8KbhUjEsnloEhFKeCoa7Gv6snkMyv:QEXghBfMDg8F4qW8KbQNljP87G5Vyv
Score

7^/10

execution
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2