Overview

overview

7

Static

static

3

32e6b1574f...0N.exe

windows7-x64

7

32e6b1574f...0N.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32e6b1574f6a57bc0c73e9dd829f89d0N.exe

  • Size

    170KB

  • Sample

    240724-bz35bs1akq

  • MD5

    32e6b1574f6a57bc0c73e9dd829f89d0

  • SHA1

    b1fc82659822e9cd5b303a24a943861778bdd430

  • SHA256

    ddb83de5740e98d1961282bd552653db66204e8c66d9ca6fc95fb7efab8fe9cb

  • SHA512

    e5a547f9d614e574289d085a601c8e508136fd9fddd730e1d6f345e9321c0e40c622b4712e1483fb4d3ab53518435eb59257c84c1c89a65867c2f7a9cee191fb

  • SSDEEP

    3072:6JpOm5axh63laEo+pXX1pQD2UCohD8mxLCj+5cmeDye42L712xrpdJ8xLeb7Up:cAm5oh63laEo+pXX1pkF8mxeq5+4m71F

Score
7/10
discovery

Malware Config

Targets

    • Target

      32e6b1574f6a57bc0c73e9dd829f89d0N.exe

    • Size

      170KB

    • MD5

      32e6b1574f6a57bc0c73e9dd829f89d0

    • SHA1

      b1fc82659822e9cd5b303a24a943861778bdd430

    • SHA256

      ddb83de5740e98d1961282bd552653db66204e8c66d9ca6fc95fb7efab8fe9cb

    • SHA512

      e5a547f9d614e574289d085a601c8e508136fd9fddd730e1d6f345e9321c0e40c622b4712e1483fb4d3ab53518435eb59257c84c1c89a65867c2f7a9cee191fb

    • SSDEEP

      3072:6JpOm5axh63laEo+pXX1pQD2UCohD8mxLCj+5cmeDye42L712xrpdJ8xLeb7Up:cAm5oh63laEo+pXX1pkF8mxeq5+4m71F

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks