86a9b21bc7546c9b98149d2d9fbf00da60b3240ccf790509af72dbac29e29b9b | Triage

Sharing

General

Target

86a9b21bc7546c9b98149d2d9fbf00da60b3240ccf790509af72dbac29e29b9b
Size

120KB
Sample

221020-xmnprsaed3
MD5

a085623cdc1ab9008c3eb2d30c77c160
SHA1

a0c2993d071b975d2bd944e295bb274df55abaf7
SHA256

86a9b21bc7546c9b98149d2d9fbf00da60b3240ccf790509af72dbac29e29b9b
SHA512

5c36e3a0570dad27ccb37b6eada3f165048abf560ded1f9e018a7b5178cf5f4060a03a71dc770a5c28421018715c540f4b8d864f452fe73b8b56ebc56b7c8938
SSDEEP

3072:4jUrEDD3+0aSrBd5Rov82Z5EPO+sQJfAw8UVKtI70HN:4QwHO0hTEvTZ5/y88h70H

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  86a9b21bc7546c9b98149d2d9fbf00da60b3240ccf790509af72dbac29e29b9b
- Size
  
  120KB
- MD5
  
  a085623cdc1ab9008c3eb2d30c77c160
- SHA1
  
  a0c2993d071b975d2bd944e295bb274df55abaf7
- SHA256
  
  86a9b21bc7546c9b98149d2d9fbf00da60b3240ccf790509af72dbac29e29b9b
- SHA512
  
  5c36e3a0570dad27ccb37b6eada3f165048abf560ded1f9e018a7b5178cf5f4060a03a71dc770a5c28421018715c540f4b8d864f452fe73b8b56ebc56b7c8938
- SSDEEP
  
  3072:4jUrEDD3+0aSrBd5Rov82Z5EPO+sQJfAw8UVKtI70HN:4QwHO0hTEvTZ5/y88h70H
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2