913f2197f8bea852bbb7abfdcd3abae2a7bb2309b4b23e444e24beb7b131a21a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

913f2197f8bea852bbb7abfdcd3abae2a7bb2309b4b23e444e24beb7b131a21a
Size

3.2MB
Sample

240805-wflfdsxcne
MD5

ebf7aa4e3aaf0355ecf7e9bc726aacd8
SHA1

b5032fd28b13c69c2dbfcd3ee01fb418fcd628c3
SHA256

913f2197f8bea852bbb7abfdcd3abae2a7bb2309b4b23e444e24beb7b131a21a
SHA512

889eb5ea7195c5aa6e43c42d262e18b4c0a767d999efbef57051d5838fd65c791e68ebc563facfc4a5574e00f0f089cfe5b511c1f754d816eb72baf304c5b537
SSDEEP

49152:X7uUd8g4X/jCb21UhH35rTHhrnwtGVyaB3C1CvEqm+eYIDNVU16j/dbr4imHHXN0:/d8/XrU21ArTJnXVyoIqcYAK4MicHN

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  913f2197f8bea852bbb7abfdcd3abae2a7bb2309b4b23e444e24beb7b131a21a
- Size
  
  3.2MB
- MD5
  
  ebf7aa4e3aaf0355ecf7e9bc726aacd8
- SHA1
  
  b5032fd28b13c69c2dbfcd3ee01fb418fcd628c3
- SHA256
  
  913f2197f8bea852bbb7abfdcd3abae2a7bb2309b4b23e444e24beb7b131a21a
- SHA512
  
  889eb5ea7195c5aa6e43c42d262e18b4c0a767d999efbef57051d5838fd65c791e68ebc563facfc4a5574e00f0f089cfe5b511c1f754d816eb72baf304c5b537
- SSDEEP
  
  49152:X7uUd8g4X/jCb21UhH35rTHhrnwtGVyaB3C1CvEqm+eYIDNVU16j/dbr4imHHXN0:/d8/XrU21ArTJnXVyoIqcYAK4MicHN
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2