387eff4b94a358cfb0f5c26463b1d20a504e43104e18784e7342def4486c33d0 | Triage

Sharing

General

Target

RaiDrive2023.9.209x64.exe
Size

37.6MB
Sample

240907-k8nwfawfkj
MD5

de917829cea592f66c8320229c7e74ab
SHA1

8e6b0c1af29bcf842c134984101c300559d9c365
SHA256

387eff4b94a358cfb0f5c26463b1d20a504e43104e18784e7342def4486c33d0
SHA512

7ea124bb8c54229b840b493dbdf43775b8dac7ab35ea5bc1ba772e882ed2e7fa6a9e693684bafb6779c6db98b36f34f505d2bd8c7a2cf06ecc079b38cc865527
SSDEEP

786432:pcl+XtGj/8LMz7OEIHrfdtBsBSVt2waPdql+ittgRxaRrkLTsYy0lyWMX:pcl+XtGj/kMz7OEIHrfdt3uwaUhtEwB/

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  
  RaiDrive2023.9.209x64.exe
- Size
  
  37.6MB
- MD5
  
  de917829cea592f66c8320229c7e74ab
- SHA1
  
  8e6b0c1af29bcf842c134984101c300559d9c365
- SHA256
  
  387eff4b94a358cfb0f5c26463b1d20a504e43104e18784e7342def4486c33d0
- SHA512
  
  7ea124bb8c54229b840b493dbdf43775b8dac7ab35ea5bc1ba772e882ed2e7fa6a9e693684bafb6779c6db98b36f34f505d2bd8c7a2cf06ecc079b38cc865527
- SSDEEP
  
  786432:pcl+XtGj/8LMz7OEIHrfdtBsBSVt2waPdql+ittgRxaRrkLTsYy0lyWMX:pcl+XtGj/kMz7OEIHrfdt3uwaUhtEwB/
Score

6^/10

discovery execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecution