07fbea88707517adb9ec03a9d1cf309e39020e7c44b863aa14038447281515e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

000068cebbb49c9a4c9bce10891dcde0N.exe
Size

36KB
Sample

240806-ytal6aygjn
MD5

000068cebbb49c9a4c9bce10891dcde0
SHA1

49cbb909dd360365757588eae1cc047e855ddf2a
SHA256

07fbea88707517adb9ec03a9d1cf309e39020e7c44b863aa14038447281515e1
SHA512

e685f87e4f4c64da21d3169c18142a7451f645613a951c386a99dce5ddceef4435fea895f8f41831f8765785b0d004723add253621dea2dc6f9a7706953533c4
SSDEEP

768:IWNsTY5SLXNoKufKsW2zxPvVZBFp2lufit:IMswLy2VBf2lufi

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  000068cebbb49c9a4c9bce10891dcde0N.exe
- Size
  
  36KB
- MD5
  
  000068cebbb49c9a4c9bce10891dcde0
- SHA1
  
  49cbb909dd360365757588eae1cc047e855ddf2a
- SHA256
  
  07fbea88707517adb9ec03a9d1cf309e39020e7c44b863aa14038447281515e1
- SHA512
  
  e685f87e4f4c64da21d3169c18142a7451f645613a951c386a99dce5ddceef4435fea895f8f41831f8765785b0d004723add253621dea2dc6f9a7706953533c4
- SSDEEP
  
  768:IWNsTY5SLXNoKufKsW2zxPvVZBFp2lufit:IMswLy2VBf2lufi
Score

7^/10

discovery
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2