0151b91454c0e570f4123cc1e84c4442aaff32c0a206b942da0f29885e2711b5 | Triage

Sharing

General

Target

0151b91454c0e570f4123cc1e84c4442aaff32c0a206b942da0f29885e2711b5
Size

186KB
Sample

221106-w3lpnsfbh8
MD5

0db66bdef6187f2158ee6821dd9b15b0
SHA1

03b6fa20847321aa36e21193d0cb5c6ae8cf1298
SHA256

0151b91454c0e570f4123cc1e84c4442aaff32c0a206b942da0f29885e2711b5
SHA512

858d60bc32d414d37bc0f881cd1af489803e012a6f4a7ae52c770eed92dce398362579ada8f1371770fa6d8bd2487400f4d8bc94d918ab66163c970b606d7329
SSDEEP

3072:jbS3hXbtR1nCi6dcApMFA0GZZzgkxUOadTB2jgxkrIYhMHTxQniKciIe0aa:jbSVtRNOcamDGT8eWFugxyhMQiKdIY

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  0151b91454c0e570f4123cc1e84c4442aaff32c0a206b942da0f29885e2711b5
- Size
  
  186KB
- MD5
  
  0db66bdef6187f2158ee6821dd9b15b0
- SHA1
  
  03b6fa20847321aa36e21193d0cb5c6ae8cf1298
- SHA256
  
  0151b91454c0e570f4123cc1e84c4442aaff32c0a206b942da0f29885e2711b5
- SHA512
  
  858d60bc32d414d37bc0f881cd1af489803e012a6f4a7ae52c770eed92dce398362579ada8f1371770fa6d8bd2487400f4d8bc94d918ab66163c970b606d7329
- SSDEEP
  
  3072:jbS3hXbtR1nCi6dcApMFA0GZZzgkxUOadTB2jgxkrIYhMHTxQniKciIe0aa:jbSVtRNOcamDGT8eWFugxyhMQiKdIY
Score

10^/10

evasion
- Modifies firewall policy service
  evasion
- Drops file in Drivers directory
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2