053430d68549e2ee4fbc14e8abf29f1b4edfda8810429c674e1654eef88f03b5 | Triage

Sharing

General

Target

053430d68549e2ee4fbc14e8abf29f1b4edfda8810429c674e1654eef88f03b5
Size

224KB
Sample

221014-mhzlcsbcb2
MD5

002c15b20b531a264bb8fdb063e4e380
SHA1

910ff5ede185aea8444c3cd125d96d39c6668515
SHA256

053430d68549e2ee4fbc14e8abf29f1b4edfda8810429c674e1654eef88f03b5
SHA512

c3a506d98e7e13f4c081e86c04d274fb2d2a02f6bc1970f7c46c30719bb46cdd589f42ced6e3788d068fa538d4f7e797247616ce2277b6251655f0c0ea8529df
SSDEEP

3072:RlxBsqIOltCis+GkfDDffffNfffLffffnWz1MknbkVnNx1XvdfmyHzre:RlrUMkbkVdFf9W

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  053430d68549e2ee4fbc14e8abf29f1b4edfda8810429c674e1654eef88f03b5
- Size
  
  224KB
- MD5
  
  002c15b20b531a264bb8fdb063e4e380
- SHA1
  
  910ff5ede185aea8444c3cd125d96d39c6668515
- SHA256
  
  053430d68549e2ee4fbc14e8abf29f1b4edfda8810429c674e1654eef88f03b5
- SHA512
  
  c3a506d98e7e13f4c081e86c04d274fb2d2a02f6bc1970f7c46c30719bb46cdd589f42ced6e3788d068fa538d4f7e797247616ce2277b6251655f0c0ea8529df
- SSDEEP
  
  3072:RlxBsqIOltCis+GkfDDffffNfffLffffnWz1MknbkVnNx1XvdfmyHzre:RlrUMkbkVdFf9W
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Registry Run Keys / Startup Folder

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2