e3231d6240a907079ddaa52575ebc7ac2232955b9f54e2b0de7f0e7cf1069f27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e3231d6240a907079ddaa52575ebc7ac2232955b9f54e2b0de7f0e7cf1069f27
Size

260KB
Sample

240911-xnw3jaxclr
MD5

c93bc280d54cbb439e5c874dc16323d4
SHA1

de1245f0ea6623279ab68174aaa0f547eefece75
SHA256

e3231d6240a907079ddaa52575ebc7ac2232955b9f54e2b0de7f0e7cf1069f27
SHA512

3b78c9ace99e6cb237ad74d61322a30d628cdd420049d17c80effdea17ac7ae3ce0886b8beffc1d75a4382606749776eb286f568a2a300dc1b79d268955113e4
SSDEEP

3072:penJkuJVL1LRkgUA1nQZwFGVO4Mqg+WDY:VuJ/LRp1nQ4QLd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e3231d6240a907079ddaa52575ebc7ac2232955b9f54e2b0de7f0e7cf1069f27
- Size
  
  260KB
- MD5
  
  c93bc280d54cbb439e5c874dc16323d4
- SHA1
  
  de1245f0ea6623279ab68174aaa0f547eefece75
- SHA256
  
  e3231d6240a907079ddaa52575ebc7ac2232955b9f54e2b0de7f0e7cf1069f27
- SHA512
  
  3b78c9ace99e6cb237ad74d61322a30d628cdd420049d17c80effdea17ac7ae3ce0886b8beffc1d75a4382606749776eb286f568a2a300dc1b79d268955113e4
- SSDEEP
  
  3072:penJkuJVL1LRkgUA1nQZwFGVO4Mqg+WDY:VuJ/LRp1nQ4QLd
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2