7a717f1cd49637c9196065d489ee439e9e50d29f4ff9112350608e1300233164 | Triage

Sharing

General

Target

7a717f1cd49637c9196065d489ee439e9e50d29f4ff9112350608e1300233164N
Size

4.8MB
Sample

240919-gwmwtsvclm
MD5

793661edeedb9db8b09f4e72c4d05950
SHA1

d4d5cc1491f29d22c622c1521adee8d8dbf72666
SHA256

7a717f1cd49637c9196065d489ee439e9e50d29f4ff9112350608e1300233164
SHA512

aef438c43d984002c4c17b0df29e2f761dbe31a80c5553994c641b3a7b0eebbde22cd9ff85f733cd302616401b1b765f7f647976486148c397f0382512cad0f9
SSDEEP

49152:pqj00f62wSvIj8kyyOiIBQoKHnHuB1UAjwqbMVaydWfOHSCyN78/NW6g/yjKj638:pieSv4y0IKoKHHIMz75bN84s

Score

6^/10

defense_evasion execution

Malware Config

Targets

- Target
  
  7a717f1cd49637c9196065d489ee439e9e50d29f4ff9112350608e1300233164N
- Size
  
  4.8MB
- MD5
  
  793661edeedb9db8b09f4e72c4d05950
- SHA1
  
  d4d5cc1491f29d22c622c1521adee8d8dbf72666
- SHA256
  
  7a717f1cd49637c9196065d489ee439e9e50d29f4ff9112350608e1300233164
- SHA512
  
  aef438c43d984002c4c17b0df29e2f761dbe31a80c5553994c641b3a7b0eebbde22cd9ff85f733cd302616401b1b765f7f647976486148c397f0382512cad0f9
- SSDEEP
  
  49152:pqj00f62wSvIj8kyyOiIBQoKHnHuB1UAjwqbMVaydWfOHSCyN78/NW6g/yjKj638:pieSv4y0IKoKHHIMz75bN84s
Score

6^/10

defense_evasion execution
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Ignore Process Interrupts

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

defense_evasionexecution