47921e03ab88b74e00aa2e64245cef0abeba1a7f2bfb6db5f9d6605b41e2d562 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47921e03ab88b74e00aa2e64245cef0abeba1a7f2bfb6db5f9d6605b41e2d562
Size

49KB
Sample

221029-1jkeqagcf4
MD5

56ea7fd95be1297f36f4ee567170c5f0
SHA1

51625c24d0b347bb12bea3e10831ef98644084af
SHA256

47921e03ab88b74e00aa2e64245cef0abeba1a7f2bfb6db5f9d6605b41e2d562
SHA512

8b896b0485f7adae31c89ef4a583c0cec843f050f78d59d6b0a88e97f3c8e5d6759a29854492245f7b47b31d1585e2b6305cd11ab98d8956675c767540ee1ffc
SSDEEP

1536:tZL+AUTpldYACuvMuGakmx1pss1CJQ7wQQ8i2p8i2:tZL+AUTpldSukuG41ss1MQMQmW

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  47921e03ab88b74e00aa2e64245cef0abeba1a7f2bfb6db5f9d6605b41e2d562
- Size
  
  49KB
- MD5
  
  56ea7fd95be1297f36f4ee567170c5f0
- SHA1
  
  51625c24d0b347bb12bea3e10831ef98644084af
- SHA256
  
  47921e03ab88b74e00aa2e64245cef0abeba1a7f2bfb6db5f9d6605b41e2d562
- SHA512
  
  8b896b0485f7adae31c89ef4a583c0cec843f050f78d59d6b0a88e97f3c8e5d6759a29854492245f7b47b31d1585e2b6305cd11ab98d8956675c767540ee1ffc
- SSDEEP
  
  1536:tZL+AUTpldYACuvMuGakmx1pss1CJQ7wQQ8i2p8i2:tZL+AUTpldSukuG41ss1MQMQmW
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2