5de737c3bf5a527341aa711c3baef08e80db435c331628a79a6e53a35cfacbd9 | Triage

Sharing

General

Target

5de737c3bf5a527341aa711c3baef08e80db435c331628a79a6e53a35cfacbd9
Size

838KB
Sample

221020-jjs87abhen
MD5

8024721a44904c24fcb05c2442d66c50
SHA1

70f825801369c34892cc3aab91813fe7370a8a9d
SHA256

5de737c3bf5a527341aa711c3baef08e80db435c331628a79a6e53a35cfacbd9
SHA512

7bf43af3c208bd2a9c56fadff016bfa1438d1dc07e4f002237730c037243987521d6681acb12976eb4d1be2b0fc868766de68d840d079b68f388db2cf4fb14df
SSDEEP

12288:0nJbCnZ2Cq6Fiq7JYzjuY+18r0dLTJxYQJn6Bra3uAhvBt9226H2:8JoZ9q6Fi0JYVk8oBTJxYQJ6tGhO

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  5de737c3bf5a527341aa711c3baef08e80db435c331628a79a6e53a35cfacbd9
- Size
  
  838KB
- MD5
  
  8024721a44904c24fcb05c2442d66c50
- SHA1
  
  70f825801369c34892cc3aab91813fe7370a8a9d
- SHA256
  
  5de737c3bf5a527341aa711c3baef08e80db435c331628a79a6e53a35cfacbd9
- SHA512
  
  7bf43af3c208bd2a9c56fadff016bfa1438d1dc07e4f002237730c037243987521d6681acb12976eb4d1be2b0fc868766de68d840d079b68f388db2cf4fb14df
- SSDEEP
  
  12288:0nJbCnZ2Cq6Fiq7JYzjuY+18r0dLTJxYQJn6Bra3uAhvBt9226H2:8JoZ9q6Fi0JYVk8oBTJxYQJ6tGhO
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2