8bd2c7e7a0532c5d149c3085639a07038673c7f65004df804bff6f55e24830eb | Triage

Sharing

General

Target

8bd2c7e7a0532c5d149c3085639a07038673c7f65004df804bff6f55e24830eb
Size

62KB
Sample

221020-nbjf8sbcg3
MD5

43a0ad65ace690107ef0e6f772d41180
SHA1

8b1407e2b9a03736670f5e8d7bc9dcb8f3011c5a
SHA256

8bd2c7e7a0532c5d149c3085639a07038673c7f65004df804bff6f55e24830eb
SHA512

f4800e1b9cc94f100c5aaf1f4c6a9b96a0d3a7c4f68b6042db46162e3108787ef754ee2f02eaaee693d9c6b74caa09847d1e6cd18f7b01d8147c22e18ad2a479
SSDEEP

1536:oTURDoq4OZZZLlCIibVmHoha8bavhWxrZqmLjg:oYRD68wbVmGa8ghWxVNg

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  8bd2c7e7a0532c5d149c3085639a07038673c7f65004df804bff6f55e24830eb
- Size
  
  62KB
- MD5
  
  43a0ad65ace690107ef0e6f772d41180
- SHA1
  
  8b1407e2b9a03736670f5e8d7bc9dcb8f3011c5a
- SHA256
  
  8bd2c7e7a0532c5d149c3085639a07038673c7f65004df804bff6f55e24830eb
- SHA512
  
  f4800e1b9cc94f100c5aaf1f4c6a9b96a0d3a7c4f68b6042db46162e3108787ef754ee2f02eaaee693d9c6b74caa09847d1e6cd18f7b01d8147c22e18ad2a479
- SSDEEP
  
  1536:oTURDoq4OZZZLlCIibVmHoha8bavhWxrZqmLjg:oYRD68wbVmGa8ghWxVNg
Score

10^/10

evasion
- Modifies firewall policy service
  evasion
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2