a69d27abd043cc676095f71300bf6b2368167536fcd4fe5342cf79a7e94fc2fe | Triage

Sharing

General

Target

trehjugdr4et6u.msi
Size

548KB
Sample

211007-q566haceb3
MD5

065e70c3b1e6841074a25aafa95e20bd
SHA1

0a230bdb9e7baf228a63deefa489e2263e879eaa
SHA256

a69d27abd043cc676095f71300bf6b2368167536fcd4fe5342cf79a7e94fc2fe
SHA512

3daf1be9ab90707cc706f58d3598f59f1f0fec4820eb8838041d9c3454b5daf12765005fb663f8501ab873ccfe8f67d02f8af87ea2e22389d9724e5a3d9c0f77

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  trehjugdr4et6u.msi
- Size
  
  548KB
- MD5
  
  065e70c3b1e6841074a25aafa95e20bd
- SHA1
  
  0a230bdb9e7baf228a63deefa489e2263e879eaa
- SHA256
  
  a69d27abd043cc676095f71300bf6b2368167536fcd4fe5342cf79a7e94fc2fe
- SHA512
  
  3daf1be9ab90707cc706f58d3598f59f1f0fec4820eb8838041d9c3454b5daf12765005fb663f8501ab873ccfe8f67d02f8af87ea2e22389d9724e5a3d9c0f77
Score

8^/10

persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2