d13f59d7f22131a65d3ef9075ac4de32daebfc428aa5257f92902cf487633f39

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_d13f59d7f22131a65d3ef9075ac4de32daebfc428aa5257f92902cf487633f39.bin
Size 38KB
Sample260928-e11mdavs3m
SHA256 d13f59d7f22131a65d3ef9075ac4de32daebfc428aa5257f92902cf487633f39
MD5 70d0e2105a45622ff6ae11c7fa310ba4
SHA1 f261f4d6b0c61513461b85b1eea17c51df3030ef
SHA512 7b880b9b4f953a047315e4fede97170e22fba7076e829803a1b9efb8cb25488494001b479fa21256ee0771940e55b9fd475f398a5bfec53858e4ede23fbd83bf
SSDEEP 768:9aR1ARRB9w9w+nKoCh7x5P69HA0vSL4AMQPsjMHYiNEdKW4SYMnaPMrFnQ/9DIOZ:VmVnZCaAoSsAKNdb47MrFQ/dIOuza
TLSH
T10D03F16B0880D94254EC572A716EDFACD0FC36999CA23DB9C164181E92C6FCD6A40F47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution

Malware Config

Targets

- Target
  ESPERANT.COM
- Size 17KB
- SHA256 ae77cccaa922a27e51e7f0750d3e9b10744686bad3aacf1e6dc488be40f7413c
- MD5 6048359d409bf16e4898166306ecedc9
- SHA1 ed29eaf00183e52972446436e4473f1742d6ec7f
- SHA512 fdc8e25895669e751cb338a325a38696ef311a278aa410326b0fa1e9c6c4346f81ddac74eedaddf2490e3518e8ea3c1adc8752133e84bdc00d5f8d249643564d
- SSDEEP 384:IS4LGd82Mnz5kPkpN/ayUmszobQ6LOHF0abZBjtClozm+2Xeg3ktV3GXfrmIzDIO:ULib3y/FOwDATw4s5CARL
- TLSH
  T12F825D1C8F460693C7711534EFAA51C4F76A809F7A5A59823CCC93BC3B74B6192E639C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  ESPERANT.EXE
- Size 15KB
- SHA256 6347e7550bca3e414f96fe212d3cdf24d3e0956423c4d9cb9b92ccb561c0948c
- MD5 8f1a55a66ef7450511aab207ceb90909
- SHA1 52a889c52fece95937efa3e733a03e960b26a71f
- SHA512 9c19cd398f601e40809d1f94783bb7e2969c6fe677505ec9b5cbf4e03af5651ef9ca071f6d7b27c8de397fabec4e33488f223aaf18e874c18c444dcabce25133
- SSDEEP 384:qpsDsmtnc0GALxiugru699IUDS4zUgRZE:qmDsmKALArtCgR2
- TLSH
  T1C1622A067E350CC1C6D9097505A7F6B85A87AC55395C20876FB0FE9F2C38391BA632BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  ESPO_NE.EXE
- Size 21KB
- SHA256 78702049a75b0f947503a02432842ecdbb6c9977d1b8483aa69d21e8b3453e35
- MD5 9cb344bea327c350c4c52a0734153f76
- SHA1 fa98ce58d4ed920e6a02cd809285706902e8e378
- SHA512 8045a6134f7b02435235aa1585d02756bbbb35134f271ae4a8da34f8aafc96ef79a319d1f57e450586033b200f032886253c535811d10415159da1e539aaa97a
- SSDEEP 384:jKfBQWNDJdABECMZDNW03bFUnseFYhW7iFvbIiYeaAarIIUDS4zUARZY:++WlwBtMlNH5QdYW+bSeNTCAR6
- TLSH
  T192A28D1998248533D6BE8AFC3CAAC458C11E80561FD410685FECDD48A329A513BB7F7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  ESPO_PE.EXE
- Size 10KB
- SHA256 cb0a134cd2f385215d2b808841014bf6ef1d75f97d2f281f64dae5d80ea7e651
- MD5 aaf654d9df461627ac159c059dd9f435
- SHA1 aecf734d6be784d62d18ffb8d69f8d9b72648c7e
- SHA512 1b2caeaf08791cb55fc2f1a334312933099fb9c727d9147ad7640cb1043542f35eb1163df3e9242a6f90f70c9fd2b030d0f208c97258b02427a8a83509dec5b2
- SSDEEP 192:ziP8Qju26JwXSI0MBB2YpUnTjMwjIiFVUDJcudXhZUAReoQHhU4+:ziP1juar0MBTiT4wk+VUDS4zUARZx
- TLSH
  T176225B33AA35F881C8940C7608B3C35B9651DE015D9A05EB36FC7B97357CBC2A7845B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8