5cf02ef8ba3cb12bacf44b35ae71e53357ecfadffbebf02057004c791bedb476 | Triage

Sharing

General

Target

5cf02ef8ba3cb12bacf44b35ae71e53357ecfadffbebf02057004c791bedb476N
Size

4.8MB
Sample

240919-hwmrhawgrq
MD5

314416cd8a7ca237e550fd7b77acf770
SHA1

fb7e229e6782aba64a9d781d0605aed586627331
SHA256

5cf02ef8ba3cb12bacf44b35ae71e53357ecfadffbebf02057004c791bedb476
SHA512

831b85064956d3372f7e7019900aea5c96cfa4ae9b3d1a2ff904376191fe1fc2452d7d13ce701b3fce3765c867effd4d0b6c0d5f7d1d725c79ed9c53f8621f1d
SSDEEP

49152:uqj00f62wSvIi8kyyOiIBQoKHnHuB1UAjwqbMVaydWfOHSCyN78/NW6g/yjKj63W:uieSvPy0IKoKHHIMzx5bN84s

Score

6^/10

defense_evasion execution

Malware Config

Targets

- Target
  
  5cf02ef8ba3cb12bacf44b35ae71e53357ecfadffbebf02057004c791bedb476N
- Size
  
  4.8MB
- MD5
  
  314416cd8a7ca237e550fd7b77acf770
- SHA1
  
  fb7e229e6782aba64a9d781d0605aed586627331
- SHA256
  
  5cf02ef8ba3cb12bacf44b35ae71e53357ecfadffbebf02057004c791bedb476
- SHA512
  
  831b85064956d3372f7e7019900aea5c96cfa4ae9b3d1a2ff904376191fe1fc2452d7d13ce701b3fce3765c867effd4d0b6c0d5f7d1d725c79ed9c53f8621f1d
- SSDEEP
  
  49152:uqj00f62wSvIi8kyyOiIBQoKHnHuB1UAjwqbMVaydWfOHSCyN78/NW6g/yjKj63W:uieSvPy0IKoKHHIMzx5bN84s
Score

6^/10

defense_evasion execution
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Ignore Process Interrupts

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

defense_evasionexecution