55eb3589bc1c193fdc605f5335075963ecf30190437d1cfac40f4e2c87d76102 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55eb3589bc1c193fdc605f5335075963ecf30190437d1cfac40f4e2c87d76102
Size

61KB
Sample

221003-bmlphsacc8
MD5

01767d549e82e258a4e00ed26638d951
SHA1

b6e6850bca9ae2440c9a6f3fc19c999f2b81fec3
SHA256

55eb3589bc1c193fdc605f5335075963ecf30190437d1cfac40f4e2c87d76102
SHA512

4ce69e86ecc559e66ba9d2268d8a30cc89cf61da1e8f4b9e15dce281b5b2c48a67126d0a1dee8383c6a1d783239848e2ee1de03c3e103c4e8d02d236d321d28f
SSDEEP

768:FoXuhcfr92oi27l5lNuC4RcYMZBrk5CmtBo4c1WyOiW9DYYxjgf9KsBdGXNPg9:AxF57l5Tv2kBMl418iW9EYxjgfbdGW

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  55eb3589bc1c193fdc605f5335075963ecf30190437d1cfac40f4e2c87d76102
- Size
  
  61KB
- MD5
  
  01767d549e82e258a4e00ed26638d951
- SHA1
  
  b6e6850bca9ae2440c9a6f3fc19c999f2b81fec3
- SHA256
  
  55eb3589bc1c193fdc605f5335075963ecf30190437d1cfac40f4e2c87d76102
- SHA512
  
  4ce69e86ecc559e66ba9d2268d8a30cc89cf61da1e8f4b9e15dce281b5b2c48a67126d0a1dee8383c6a1d783239848e2ee1de03c3e103c4e8d02d236d321d28f
- SSDEEP
  
  768:FoXuhcfr92oi27l5lNuC4RcYMZBrk5CmtBo4c1WyOiW9DYYxjgf9KsBdGXNPg9:AxF57l5Tv2kBMl418iW9EYxjgfbdGW
Score

8^/10

persistence
- Adds policy Run key to start application
  persistence
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2