94e29674936a0f79cc94e01f8f97671cc4dbe0b9c621e8a9401ddfaebe77448e | Triage

Sharing

General

Target

94e29674936a0f79cc94e01f8f97671cc4dbe0b9c621e8a9401ddfaebe77448e
Size

358KB
Sample

221030-1hesvacgaq
MD5

a1220405d9c154cd9b92e07675380ce0
SHA1

eb0788c709e7c1200a9a595c2b4efb154a26e16c
SHA256

94e29674936a0f79cc94e01f8f97671cc4dbe0b9c621e8a9401ddfaebe77448e
SHA512

5fcfb13a42f7c11f88851ec78b092b32a43c771250425c24310a9fdbe582622cd29a7af95dd5f7a78780292c2e48ab5250d8e851942321ffe7fbfc3f6581ad44
SSDEEP

1536:0wmWp4+jy6dgarXPOxL4I4PP6PcvPnyp3aOTotXQRHq8i2HH2z48i2:vGGgKOxL86PcvgKOEtg6kv

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  94e29674936a0f79cc94e01f8f97671cc4dbe0b9c621e8a9401ddfaebe77448e
- Size
  
  358KB
- MD5
  
  a1220405d9c154cd9b92e07675380ce0
- SHA1
  
  eb0788c709e7c1200a9a595c2b4efb154a26e16c
- SHA256
  
  94e29674936a0f79cc94e01f8f97671cc4dbe0b9c621e8a9401ddfaebe77448e
- SHA512
  
  5fcfb13a42f7c11f88851ec78b092b32a43c771250425c24310a9fdbe582622cd29a7af95dd5f7a78780292c2e48ab5250d8e851942321ffe7fbfc3f6581ad44
- SSDEEP
  
  1536:0wmWp4+jy6dgarXPOxL4I4PP6PcvPnyp3aOTotXQRHq8i2HH2z48i2:vGGgKOxL86PcvgKOEtg6kv
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2