cea28f9a1152d1ea6d9c37fab4e688192a721e076944d2f71748790319f44066 | Triage

Sharing

General

Target

cea28f9a1152d1ea6d9c37fab4e688192a721e076944d2f71748790319f44066
Size

78KB
Sample

221019-zl5yrsgcd3
MD5

a1556c111dad0b6dfde55484182ef4e0
SHA1

ed5006f8c20a68952556f22d339a0dc9c51715c6
SHA256

cea28f9a1152d1ea6d9c37fab4e688192a721e076944d2f71748790319f44066
SHA512

b64124ebc577982b17438c84fec09884214f240b8c3ee4f92094861917067111ae9b6bfafc316db6a98d64a6edb84446227057555ce7e8e34516219f0c476ae3
SSDEEP

1536:tQL+AUTpldYFCuvMuGakmx1ps51g+JfiRNy8dfkY6xff+kisKldl:tQL+AUTpldLukuG41s515JaRNijwxZ

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  cea28f9a1152d1ea6d9c37fab4e688192a721e076944d2f71748790319f44066
- Size
  
  78KB
- MD5
  
  a1556c111dad0b6dfde55484182ef4e0
- SHA1
  
  ed5006f8c20a68952556f22d339a0dc9c51715c6
- SHA256
  
  cea28f9a1152d1ea6d9c37fab4e688192a721e076944d2f71748790319f44066
- SHA512
  
  b64124ebc577982b17438c84fec09884214f240b8c3ee4f92094861917067111ae9b6bfafc316db6a98d64a6edb84446227057555ce7e8e34516219f0c476ae3
- SSDEEP
  
  1536:tQL+AUTpldYFCuvMuGakmx1ps51g+JfiRNy8dfkY6xff+kisKldl:tQL+AUTpldLukuG41s515JaRNijwxZ
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2