5ec33fa1c0101afe476b1f09a59caa7a47ca7dcfd6ba6be9a992e1dcd74995d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38e5708d158ce5a25ff2ef323e54c550N.exe
Size

184KB
Sample

240803-c1gs6avenb
MD5

38e5708d158ce5a25ff2ef323e54c550
SHA1

40515f1312bb32754d06d7704f135abcf7cfa904
SHA256

5ec33fa1c0101afe476b1f09a59caa7a47ca7dcfd6ba6be9a992e1dcd74995d3
SHA512

33b53c2e59948b23330e6a3d2e7b82387b09e654c101eb881a35b5e72e6c5a0368b6fc7ca9ecf0aeb4e5d581e446d018fe847b3bec493f2b823dd0fa0ee7c38f
SSDEEP

1536:THSoNdVRsAXg993nNK6Y1Yu6nz50vVkdIJIfBNMo/9J/awOnkNQK3:7SsdVRsAXg7M1Y3nz520NMo/9l7NQK3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  38e5708d158ce5a25ff2ef323e54c550N.exe
- Size
  
  184KB
- MD5
  
  38e5708d158ce5a25ff2ef323e54c550
- SHA1
  
  40515f1312bb32754d06d7704f135abcf7cfa904
- SHA256
  
  5ec33fa1c0101afe476b1f09a59caa7a47ca7dcfd6ba6be9a992e1dcd74995d3
- SHA512
  
  33b53c2e59948b23330e6a3d2e7b82387b09e654c101eb881a35b5e72e6c5a0368b6fc7ca9ecf0aeb4e5d581e446d018fe847b3bec493f2b823dd0fa0ee7c38f
- SSDEEP
  
  1536:THSoNdVRsAXg993nNK6Y1Yu6nz50vVkdIJIfBNMo/9J/awOnkNQK3:7SsdVRsAXg7M1Y3nz520NMo/9l7NQK3
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2