e2cb3f9721395a339d9a74c3ab14c0d08e74ca58e4d57681bd7007751943b9c0 | Triage

Sharing

General

Target

e2cb3f9721395a339d9a74c3ab14c0d08e74ca58e4d57681bd7007751943b9c0
Size

136KB
Sample

221030-z5sgsacbcj
MD5

91b05230ab23abb202992eba9c4147c8
SHA1

d48199bca41e5b6f7631eff588c73e08015aa131
SHA256

e2cb3f9721395a339d9a74c3ab14c0d08e74ca58e4d57681bd7007751943b9c0
SHA512

b01c5f181c48b67f09eb375c4d638072dedb822121e72ba11c7a69d49ed5c8aa3eedb5bc40fa00f16e8f0eb9442804b506def13a811d9aa5dc5cf4f01113343d
SSDEEP

1536:WGOdtOLkjp6WA8dlOSTX9OX3nnAFgMPpdZdfWj0xAzkpYTHs8:Wfykjp6WpmSsX3nQgcZJWj0xAzkps

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  e2cb3f9721395a339d9a74c3ab14c0d08e74ca58e4d57681bd7007751943b9c0
- Size
  
  136KB
- MD5
  
  91b05230ab23abb202992eba9c4147c8
- SHA1
  
  d48199bca41e5b6f7631eff588c73e08015aa131
- SHA256
  
  e2cb3f9721395a339d9a74c3ab14c0d08e74ca58e4d57681bd7007751943b9c0
- SHA512
  
  b01c5f181c48b67f09eb375c4d638072dedb822121e72ba11c7a69d49ed5c8aa3eedb5bc40fa00f16e8f0eb9442804b506def13a811d9aa5dc5cf4f01113343d
- SSDEEP
  
  1536:WGOdtOLkjp6WA8dlOSTX9OX3nnAFgMPpdZdfWj0xAzkpYTHs8:Wfykjp6WpmSsX3nQgcZJWj0xAzkps
Score

8^/10

persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2