aad1d40b55622d3a289724bc4c370740b296a65d7fd64b50b90518515fc8277c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aad1d40b55622d3a289724bc4c370740b296a65d7fd64b50b90518515fc8277c
Size

225KB
Sample

240914-xwmh3a1aqr
MD5

4645e59f9f036466fee7a607484d6d22
SHA1

96ad6aa9d409cb46f8492d62fdfe459bf732528d
SHA256

aad1d40b55622d3a289724bc4c370740b296a65d7fd64b50b90518515fc8277c
SHA512

39b38a93f477a4ab7f2156fa3ddccdf5b120eda640124bef35d127e5b50b9dd6e8213a3871d5546186be310a668ac32ab80e3f03ab8b57395cd41847d882f527
SSDEEP

6144:POFpkdeKzC/leySe8AIqpoHbnDns1ND9m:Popk/VyV8hEoHbI3A

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  aad1d40b55622d3a289724bc4c370740b296a65d7fd64b50b90518515fc8277c
- Size
  
  225KB
- MD5
  
  4645e59f9f036466fee7a607484d6d22
- SHA1
  
  96ad6aa9d409cb46f8492d62fdfe459bf732528d
- SHA256
  
  aad1d40b55622d3a289724bc4c370740b296a65d7fd64b50b90518515fc8277c
- SHA512
  
  39b38a93f477a4ab7f2156fa3ddccdf5b120eda640124bef35d127e5b50b9dd6e8213a3871d5546186be310a668ac32ab80e3f03ab8b57395cd41847d882f527
- SSDEEP
  
  6144:POFpkdeKzC/leySe8AIqpoHbnDns1ND9m:Popk/VyV8hEoHbI3A
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2