Overview

overview

10

Static

static

3

4ca9da66d0...e2.exe

windows7-x64

7

4ca9da66d0...e2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    044f51347e293ac77de4cd47bdccbacf.bin

  • Size

    19.9MB

  • Sample

    241122-bcv57s1kfz

  • MD5

    ae64c73a3e594debe020cac426d176e4

  • SHA1

    cb203d9d661b17afc68f590cba4d6c279c416cfb

  • SHA256

    f11292adfaac7bccdcb111d25e2423e4d5f5439724ce304995efea0ddb748daa

  • SHA512

    44594db9d4e81812f7e9c48b92b961555b7e536c0e2a04c1ad0d2212384049be647e7bfff025c9ab27b97e6ef92edb9a5e2bfd698720b4189ad20ee20643aa9d

  • SSDEEP

    393216:G9sg4ECd93adkicIxcj3VvdBSKwdUJvvHZ/NmCLxy3owkhP+RJmabG8Ci:GpCdJadkU8VvPVJv5QCLxy3owkhPYJmk

Score
10/10
discovery

Malware Config

Targets

    • Target

      4ca9da66d04a5f68deb0bab55aca5d64b8d8307c58f2943d6a67a3b584855ee2.exe

    • Size

      20.4MB

    • MD5

      044f51347e293ac77de4cd47bdccbacf

    • SHA1

      4c67777228575ac317c62855e6d9dd0a6da48c2d

    • SHA256

      4ca9da66d04a5f68deb0bab55aca5d64b8d8307c58f2943d6a67a3b584855ee2

    • SHA512

      f3976170a7f965f9674712904a0effc8383ea1a7ac5961a746b319d4659f52f82578b5adf4a0ca52f0434a896d310268ac7e40391fb0ea929a2482bb78aa0775

    • SSDEEP

      393216:SiX7fx65E78eL1uwtkbZtqtQEt8+OIbyMl1PiT+KiSn7h6LPr8Y:bTxOEJuw+bP5krOIO3aKiSn7aPIY

    Score
    10/10
    discovery

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks