ed783759ca2f2c6ed49c54e96c3c25193f7e967c6ac46d7595527ebfc4750434 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed783759ca2f2c6ed49c54e96c3c25193f7e967c6ac46d7595527ebfc4750434
Size

108KB
Sample

221002-eh47vahcgl
MD5

7d1796ab6ac49c558909d0dadb95e130
SHA1

ab2660ef9771524b1021543b69dfcc35cbe71ba0
SHA256

ed783759ca2f2c6ed49c54e96c3c25193f7e967c6ac46d7595527ebfc4750434
SHA512

ef564febdf177bb69d40c2a13b2dbc7cfd7f975298d43a1188179dc1db76cf0de7e5157ff46ff3b7a0688c2d097115405622e134635b2ff99150c7a28a4cdbf3
SSDEEP

1536:Lk1PCXf3l9izMfUBRq/YxiLvxnjXIRXMMGBkyJMjZROYJT3bQghxHCZFNbXIDQgv:Lnf3wRqQxKvxnsRcaCZbXID1C

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  ed783759ca2f2c6ed49c54e96c3c25193f7e967c6ac46d7595527ebfc4750434
- Size
  
  108KB
- MD5
  
  7d1796ab6ac49c558909d0dadb95e130
- SHA1
  
  ab2660ef9771524b1021543b69dfcc35cbe71ba0
- SHA256
  
  ed783759ca2f2c6ed49c54e96c3c25193f7e967c6ac46d7595527ebfc4750434
- SHA512
  
  ef564febdf177bb69d40c2a13b2dbc7cfd7f975298d43a1188179dc1db76cf0de7e5157ff46ff3b7a0688c2d097115405622e134635b2ff99150c7a28a4cdbf3
- SSDEEP
  
  1536:Lk1PCXf3l9izMfUBRq/YxiLvxnjXIRXMMGBkyJMjZROYJT3bQghxHCZFNbXIDQgv:Lnf3wRqQxKvxnsRcaCZbXID1C
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2