05f48d9e54c9c0175ece0a4b745bfde6b486cd22b958dda44f2c85822eba9b2e | Triage

Sharing

General

Target

05f48d9e54c9c0175ece0a4b745bfde6b486cd22b958dda44f2c85822eba9b2e
Size

95KB
Sample

221106-w6wdaafde9
MD5

0c46235bd92eeba1e7f8c99eb0839aaf
SHA1

1c9b0912c3dfb8488dcdf7db1d198ac40ba6e711
SHA256

05f48d9e54c9c0175ece0a4b745bfde6b486cd22b958dda44f2c85822eba9b2e
SHA512

cccaa26c01b7e27236c1287bdc670d3e73218bfdb3f677b434b928b74d24ab8e70b7b392eea35060d3efb66b3d89803a6def5040b685f562ba9435200b07c3fa
SSDEEP

1536:FgkD6RVUs4GuXRvhcSpZmtVVIEf4jYFLdz7hCdHIuGiUnUPqisKldNLAi29:FgvWphvhcSMH9f4jIL7Cdo9jUvBxO

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  05f48d9e54c9c0175ece0a4b745bfde6b486cd22b958dda44f2c85822eba9b2e
- Size
  
  95KB
- MD5
  
  0c46235bd92eeba1e7f8c99eb0839aaf
- SHA1
  
  1c9b0912c3dfb8488dcdf7db1d198ac40ba6e711
- SHA256
  
  05f48d9e54c9c0175ece0a4b745bfde6b486cd22b958dda44f2c85822eba9b2e
- SHA512
  
  cccaa26c01b7e27236c1287bdc670d3e73218bfdb3f677b434b928b74d24ab8e70b7b392eea35060d3efb66b3d89803a6def5040b685f562ba9435200b07c3fa
- SSDEEP
  
  1536:FgkD6RVUs4GuXRvhcSpZmtVVIEf4jYFLdz7hCdHIuGiUnUPqisKldNLAi29:FgvWphvhcSMH9f4jIL7Cdo9jUvBxO
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2