f5ae13049ff90ed8b313c9c217522959ba9b5cd6cc651de196d58decc4aa60bd | Triage

Sharing

General

Target

Eerie Cleaner V2.bat
Size

4KB
Sample

240902-vc4l5avfkb
MD5

37ef21adf06934e902670dc77b93f91e
SHA1

e311a65512c8ded721846b07769800f36efe3e62
SHA256

f5ae13049ff90ed8b313c9c217522959ba9b5cd6cc651de196d58decc4aa60bd
SHA512

4b4814a4385c908976cc8f9b47223eeb651cff834024428b58602f34980b8c0c328e84dae2353f7abeb6e88f8575f8a1282726af3683eb2c6c228d4fad3e8775
SSDEEP

48:9dF/xamIWmN9m5lgFLtl+SSISno1hawpMv4R4MCG7nyb4tF5+gwkTp0Ro:9FIWmrClgFLP+SSISnkhaq+tA+QTpz

Score

9^/10

defense_evasion discovery execution impact ransomware spyware stealer

Malware Config

Targets

- Target
  
  Eerie Cleaner V2.bat
- Size
  
  4KB
- MD5
  
  37ef21adf06934e902670dc77b93f91e
- SHA1
  
  e311a65512c8ded721846b07769800f36efe3e62
- SHA256
  
  f5ae13049ff90ed8b313c9c217522959ba9b5cd6cc651de196d58decc4aa60bd
- SHA512
  
  4b4814a4385c908976cc8f9b47223eeb651cff834024428b58602f34980b8c0c328e84dae2353f7abeb6e88f8575f8a1282726af3683eb2c6c228d4fad3e8775
- SSDEEP
  
  48:9dF/xamIWmN9m5lgFLtl+SSISno1hawpMv4R4MCG7nyb4tF5+gwkTp0Ro:9FIWmrClgFLP+SSISnkhaq+tA+QTpz
Score

9^/10

discovery defense_evasion execution impact ransomware spyware stealer
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware defense_evasion impact execution
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Management Instrumentation

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

Indicator Removal

File Deletion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

Remote System Discovery

System Information Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

behavioral2

defense_evasiondiscoveryexecutionimpactransomwarespywarestealer