General
- Target ebe91c8c5d55a7b7c762d3e7e573ced6fcc13972ee11db8cf4508e0ec175662d
- Size 1.6MB
- Sample261017-eze92swyd1
- SHA256 ebe91c8c5d55a7b7c762d3e7e573ced6fcc13972ee11db8cf4508e0ec175662d
- MD5 57300c139b0bb2a397c1c00b88b149a9
- SHA1 411c938ef18fd42a666b59391d856c2fb2d6d32d
- SHA512 b6ce1ffa2dbc6ccdb1c552a538c936b68344c777c081a794e163565fe5ed9a8dbf75f94a1722b289ffb704e21b7ccbdeeecadd6a02228aeb7d44f2ab1bd70ae8
- SSDEEP 49152:aWz/ClXvt32W+SPYrDHH0a7jRK/AMN/j2U4FH:yXvt32W+SPADHHj7jyXj2jF
- TLSH T18B751268F2B514F9E4778178CE429906FA36BC264721A9AB13D047172F277D09D3F722
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ebe91c8c5d55a7b7c762d3e7e573ced6fcc13972ee11db8cf4508e0ec175662d.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target ebe91c8c5d55a7b7c762d3e7e573ced6fcc13972ee11db8cf4508e0ec175662d
- Size 1.6MB
- SHA256 ebe91c8c5d55a7b7c762d3e7e573ced6fcc13972ee11db8cf4508e0ec175662d
- MD5 57300c139b0bb2a397c1c00b88b149a9
- SHA1 411c938ef18fd42a666b59391d856c2fb2d6d32d
- SHA512 b6ce1ffa2dbc6ccdb1c552a538c936b68344c777c081a794e163565fe5ed9a8dbf75f94a1722b289ffb704e21b7ccbdeeecadd6a02228aeb7d44f2ab1bd70ae8
- SSDEEP 49152:aWz/ClXvt32W+SPYrDHH0a7jRK/AMN/j2U4FH:yXvt32W+SPADHHj7jyXj2jF
- TLSH T18B751268F2B514F9E4778178CE429906FA36BC264721A9AB13D047172F277D09D3F722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1