4201db29d73b0d971908479757d33676f95d610baf4fdfcdfa87ace65d85f9d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4201db29d73b0d971908479757d33676f95d610baf4fdfcdfa87ace65d85f9d9
Size

2.2MB
Sample

240909-nx963swdnl
MD5

574a77186b86732c5b7f38327f6c12fe
SHA1

9963cfdc9db426b5fef095ef6f5c3aacbe685cdc
SHA256

4201db29d73b0d971908479757d33676f95d610baf4fdfcdfa87ace65d85f9d9
SHA512

781b0d9818cdc14e74b16449ee2669730bef97834b86c36bfdce3c0f9c5d4d8eeefb6e2cedc2048e43b2b112e97186aa98830e09ed3c03be1dd40bd34e5280d6
SSDEEP

49152:U7Hvj0gfADnG2NGURdnE7nh27gL71BCzz4Rd5oqp/jiTJjFk/3itD50NT:u0gKnG2NGXLh8gL71sz4R79Ek/L

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4201db29d73b0d971908479757d33676f95d610baf4fdfcdfa87ace65d85f9d9
- Size
  
  2.2MB
- MD5
  
  574a77186b86732c5b7f38327f6c12fe
- SHA1
  
  9963cfdc9db426b5fef095ef6f5c3aacbe685cdc
- SHA256
  
  4201db29d73b0d971908479757d33676f95d610baf4fdfcdfa87ace65d85f9d9
- SHA512
  
  781b0d9818cdc14e74b16449ee2669730bef97834b86c36bfdce3c0f9c5d4d8eeefb6e2cedc2048e43b2b112e97186aa98830e09ed3c03be1dd40bd34e5280d6
- SSDEEP
  
  49152:U7Hvj0gfADnG2NGURdnE7nh27gL71BCzz4Rd5oqp/jiTJjFk/3itD50NT:u0gKnG2NGXLh8gL71sz4R79Ek/L
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2