85cfe47f75bb6d1ab540a126ed440a76389475d4cc1a9025f73a4f6dacb72904 | Triage

Sharing

General

Target

85cfe47f75bb6d1ab540a126ed440a76389475d4cc1a9025f73a4f6dacb72904
Size

1.2MB
Sample

221030-z2twfabac3
MD5

a229fa7d8547746d6870480b728adf66
SHA1

0c3ea083d601faa3dfc957e7289ff1b96cfb0a61
SHA256

85cfe47f75bb6d1ab540a126ed440a76389475d4cc1a9025f73a4f6dacb72904
SHA512

2a14a24682a82b65a49f14ef83481bbe62cc7857a8586d991724e5387f605b7b7cacd83fdc27c2668e8e99c2c986254050c26ad6cf9e1530780a69c927ec2938
SSDEEP

12288:nqOPajQUXXP8QvLWFx6Mo5rippDC7ee1hpls4EySN+:nnajQEPnvg6PhWDC75UN+

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  85cfe47f75bb6d1ab540a126ed440a76389475d4cc1a9025f73a4f6dacb72904
- Size
  
  1.2MB
- MD5
  
  a229fa7d8547746d6870480b728adf66
- SHA1
  
  0c3ea083d601faa3dfc957e7289ff1b96cfb0a61
- SHA256
  
  85cfe47f75bb6d1ab540a126ed440a76389475d4cc1a9025f73a4f6dacb72904
- SHA512
  
  2a14a24682a82b65a49f14ef83481bbe62cc7857a8586d991724e5387f605b7b7cacd83fdc27c2668e8e99c2c986254050c26ad6cf9e1530780a69c927ec2938
- SSDEEP
  
  12288:nqOPajQUXXP8QvLWFx6Mo5rippDC7ee1hpls4EySN+:nnajQEPnvg6PhWDC75UN+
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2