b52a9850eede739751b2ebeaf9cbb61998141ae830077df3bc8511d8535c8876 | Triage

Sharing

General

Target

b52a9850eede739751b2ebeaf9cbb61998141ae830077df3bc8511d8535c8876
Size

244KB
Sample

221002-s1jwhscgc4
MD5

768b5a7dc99623a905ae52879de827fd
SHA1

68cffc71f99086c67a14bc7dc0f5379c42fc4d80
SHA256

b52a9850eede739751b2ebeaf9cbb61998141ae830077df3bc8511d8535c8876
SHA512

1c5d4307fc6cb8540af9ef88c88c1b7fd2e5c3fc40cb0f6a92a18235356d2ef1927dcfa6f06762c735cd363cccac211d43c9ac8a5ff5ce3addb0647568dced01
SSDEEP

6144:QBjwaV7AOiMY+ezjcFOxUPrGbj13GIMHb1M/oiU:QxdGlljcFOxkrGbj13GIMHb1+

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  b52a9850eede739751b2ebeaf9cbb61998141ae830077df3bc8511d8535c8876
- Size
  
  244KB
- MD5
  
  768b5a7dc99623a905ae52879de827fd
- SHA1
  
  68cffc71f99086c67a14bc7dc0f5379c42fc4d80
- SHA256
  
  b52a9850eede739751b2ebeaf9cbb61998141ae830077df3bc8511d8535c8876
- SHA512
  
  1c5d4307fc6cb8540af9ef88c88c1b7fd2e5c3fc40cb0f6a92a18235356d2ef1927dcfa6f06762c735cd363cccac211d43c9ac8a5ff5ce3addb0647568dced01
- SSDEEP
  
  6144:QBjwaV7AOiMY+ezjcFOxUPrGbj13GIMHb1M/oiU:QxdGlljcFOxkrGbj13GIMHb1+
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2