cca184a1a9b4138047bae1b7e4878921288e193c9fa62822e92db4ca25e645af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cca184a1a9b4138047bae1b7e4878921288e193c9fa62822e92db4ca25e645af
Size

297KB
Sample

221020-16ccmaghe7
MD5

756edde9287f6a62d10151ccaaec1b30
SHA1

d43b7217ae1ea47995fdd82e1ff06a1e8ff216db
SHA256

cca184a1a9b4138047bae1b7e4878921288e193c9fa62822e92db4ca25e645af
SHA512

3b76dac57f0750b1931ccdbb14197e10bf12c7841fc277505a7a8d9f94a688033c0973f2e41d2340297ed5b76ebbd3ad4f492256ba6b4bb215bb8d015d3933d7
SSDEEP

6144:/hMCBNn9AbOjw3ZeT/c3oSpsxi1sAzhay:5nNn9+xJI/JSpsxi1xhZ

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  cca184a1a9b4138047bae1b7e4878921288e193c9fa62822e92db4ca25e645af
- Size
  
  297KB
- MD5
  
  756edde9287f6a62d10151ccaaec1b30
- SHA1
  
  d43b7217ae1ea47995fdd82e1ff06a1e8ff216db
- SHA256
  
  cca184a1a9b4138047bae1b7e4878921288e193c9fa62822e92db4ca25e645af
- SHA512
  
  3b76dac57f0750b1931ccdbb14197e10bf12c7841fc277505a7a8d9f94a688033c0973f2e41d2340297ed5b76ebbd3ad4f492256ba6b4bb215bb8d015d3933d7
- SSDEEP
  
  6144:/hMCBNn9AbOjw3ZeT/c3oSpsxi1sAzhay:5nNn9+xJI/JSpsxi1xhZ
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2