a55bc0996807c4560e845a46107304fde4e0bc4bdd263aef5ae56a7a980cb101 | Triage

Sharing

General

Target

a55bc0996807c4560e845a46107304fde4e0bc4bdd263aef5ae56a7a980cb101
Size

10KB
Sample

221107-sscr8sdfb3
MD5

0e50b04f802a97925ac927b0738142c1
SHA1

cc35306ae12de68c2758c0c8a4c36b5215b97b71
SHA256

a55bc0996807c4560e845a46107304fde4e0bc4bdd263aef5ae56a7a980cb101
SHA512

6bac6685d43146f45462c9f8c4e8f22d99139fcff4a5327ce12db19745dc7ca87cc22d2fa8c6c4a572979209bb46b5f308ef8ca79f8b492735df64f466a9878b
SSDEEP

96:U1tJJkr4l2jq1Yy9H/KDcXZvM8nG6HxhXboNefykFo5RFdNt8LXAIkdUwwoa29jw:CJOrdy9H/KDaHnGsxNowfQN+qBTd5K

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  a55bc0996807c4560e845a46107304fde4e0bc4bdd263aef5ae56a7a980cb101
- Size
  
  10KB
- MD5
  
  0e50b04f802a97925ac927b0738142c1
- SHA1
  
  cc35306ae12de68c2758c0c8a4c36b5215b97b71
- SHA256
  
  a55bc0996807c4560e845a46107304fde4e0bc4bdd263aef5ae56a7a980cb101
- SHA512
  
  6bac6685d43146f45462c9f8c4e8f22d99139fcff4a5327ce12db19745dc7ca87cc22d2fa8c6c4a572979209bb46b5f308ef8ca79f8b492735df64f466a9878b
- SSDEEP
  
  96:U1tJJkr4l2jq1Yy9H/KDcXZvM8nG6HxhXboNefykFo5RFdNt8LXAIkdUwwoa29jw:CJOrdy9H/KDaHnGsxNowfQN+qBTd5K
Score

7^/10

discovery persistence
- Drops startup file
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2