93b3fabbc4071e8ca2d781d02acee81670982038dbc0922aba1aa56d7eb13d05 | Triage

Sharing

General

Target

93b3fabbc4071e8ca2d781d02acee81670982038dbc0922aba1aa56d7eb13d05
Size

297KB
Sample

221123-qxkbrsab31
MD5

75da8598ae1a3efb9b3034ed81a3bd90
SHA1

01f58af975e8b80930f8bb34ad5ff584400be083
SHA256

93b3fabbc4071e8ca2d781d02acee81670982038dbc0922aba1aa56d7eb13d05
SHA512

c6ad1ddd292810aa8a033396dc6daba6adbdce0f61975a95ae12e8a5561cf3c6d26bb61a2d6a96eec0fe294d22687a560d89e2767a8100ce604e122491da6e96
SSDEEP

6144:sD+nLXGfNWs0F0gYkWgrf2F334WwymP1bdMj1VoE:sD6XwWs0F0gYkWgSF334NP1bdMXX

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  93b3fabbc4071e8ca2d781d02acee81670982038dbc0922aba1aa56d7eb13d05
- Size
  
  297KB
- MD5
  
  75da8598ae1a3efb9b3034ed81a3bd90
- SHA1
  
  01f58af975e8b80930f8bb34ad5ff584400be083
- SHA256
  
  93b3fabbc4071e8ca2d781d02acee81670982038dbc0922aba1aa56d7eb13d05
- SHA512
  
  c6ad1ddd292810aa8a033396dc6daba6adbdce0f61975a95ae12e8a5561cf3c6d26bb61a2d6a96eec0fe294d22687a560d89e2767a8100ce604e122491da6e96
- SSDEEP
  
  6144:sD+nLXGfNWs0F0gYkWgrf2F334WwymP1bdMj1VoE:sD6XwWs0F0gYkWgSF334NP1bdMXX
Score

8^/10

persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2