56eff77b029b5f56c47d11fe58878627065dbeacbc3108d50d98a83420152c2b | Triage

Resubmissions

21-11-2024 14:47

241121-r5vm5ssqfs 7

21-11-2024 12:34

241121-prryzsslaw 7

21-11-2024 12:25

241121-plqhzawqbn 7

Sharing

General

Target

QuickTimeInstaller.exe
Size

40.0MB
Sample

241121-plqhzawqbn
MD5

1a762049bef7fc3a53014833757de2d2
SHA1

e906b9b585a02c08270316fd21f8f5ce0081526a
SHA256

56eff77b029b5f56c47d11fe58878627065dbeacbc3108d50d98a83420152c2b
SHA512

b030994a6a0bab58ca135205770cc5bfd1830628573116836b30c7865b91314be767a5b6453a143464bddda263dd3487b763209bee6f1eb94240de74a2613c8e
SSDEEP

786432:ypGoHCbrFwMp9H25FtfGhJ4wNvMpZzSPwjs9jNdpS1o0K9:yPinmMeQhJhCV49hG1o/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  QuickTimeInstaller.exe
- Size
  
  40.0MB
- MD5
  
  1a762049bef7fc3a53014833757de2d2
- SHA1
  
  e906b9b585a02c08270316fd21f8f5ce0081526a
- SHA256
  
  56eff77b029b5f56c47d11fe58878627065dbeacbc3108d50d98a83420152c2b
- SHA512
  
  b030994a6a0bab58ca135205770cc5bfd1830628573116836b30c7865b91314be767a5b6453a143464bddda263dd3487b763209bee6f1eb94240de74a2613c8e
- SSDEEP
  
  786432:ypGoHCbrFwMp9H25FtfGhJ4wNvMpZzSPwjs9jNdpS1o0K9:yPinmMeQhJhCV49hG1o/
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Blocklisted process makes network request
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1