8784bb93b9c1e49191218d6c0193778dc69a4028e4cef3071ba5020b2747cddf | Triage

Sharing

General

Target

8784bb93b9c1e49191218d6c0193778dc69a4028e4cef3071ba5020b2747cddf
Size

88KB
Sample

240811-yn3qrazaph
MD5

b9844b9f674ca46f85caaab2410a8bf7
SHA1

eb94964cf3b89ec303d1e317899b55a9f39d792d
SHA256

8784bb93b9c1e49191218d6c0193778dc69a4028e4cef3071ba5020b2747cddf
SHA512

a2f6c5204c983ebdd6a0fe5f02c89f37042ca69586399b1762b6e67db06ac438898593d13b9c7d44a9f58cee31ae613a8fc7ff7a1f4ad88cb72ab58850820979
SSDEEP

1536:pf1d93SHuJV9Ntyapmebn4ddJZeY86iLflLJYEIs67rxo:pfFkuJVL8LK4ddJMY86ipmns6S

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8784bb93b9c1e49191218d6c0193778dc69a4028e4cef3071ba5020b2747cddf
- Size
  
  88KB
- MD5
  
  b9844b9f674ca46f85caaab2410a8bf7
- SHA1
  
  eb94964cf3b89ec303d1e317899b55a9f39d792d
- SHA256
  
  8784bb93b9c1e49191218d6c0193778dc69a4028e4cef3071ba5020b2747cddf
- SHA512
  
  a2f6c5204c983ebdd6a0fe5f02c89f37042ca69586399b1762b6e67db06ac438898593d13b9c7d44a9f58cee31ae613a8fc7ff7a1f4ad88cb72ab58850820979
- SSDEEP
  
  1536:pf1d93SHuJV9Ntyapmebn4ddJZeY86iLflLJYEIs67rxo:pfFkuJVL8LK4ddJMY86ipmns6S
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2