38245d744a9fb4e9267a940567395c474fc857d6fa21fe76fcdd4e71d962b661 | Triage

Sharing

General

Target

38245d744a9fb4e9267a940567395c474fc857d6fa21fe76fcdd4e71d962b661
Size

992KB
Sample

221124-arax5sac81
MD5

05508a5aaaf8579863953f8308792540
SHA1

7c903b8f69f83515fc3d6fff086186892f853711
SHA256

38245d744a9fb4e9267a940567395c474fc857d6fa21fe76fcdd4e71d962b661
SHA512

191eb14fef7c63e25ffeff3d48e8b91f8a17c16c28bba549dd0c709f24f27b7be7d0dc61d39a9eeb2b262c8968c7d1562856a807bd2e794800a7728b66a6ed9a
SSDEEP

24576:jSK2Ph8dr3+aP6b3Jv2BChi3pA/VwgbIxCZbqfyCRsO:jSKYSdKjcBSApANohyCRB

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  38245d744a9fb4e9267a940567395c474fc857d6fa21fe76fcdd4e71d962b661
- Size
  
  992KB
- MD5
  
  05508a5aaaf8579863953f8308792540
- SHA1
  
  7c903b8f69f83515fc3d6fff086186892f853711
- SHA256
  
  38245d744a9fb4e9267a940567395c474fc857d6fa21fe76fcdd4e71d962b661
- SHA512
  
  191eb14fef7c63e25ffeff3d48e8b91f8a17c16c28bba549dd0c709f24f27b7be7d0dc61d39a9eeb2b262c8968c7d1562856a807bd2e794800a7728b66a6ed9a
- SSDEEP
  
  24576:jSK2Ph8dr3+aP6b3Jv2BChi3pA/VwgbIxCZbqfyCRsO:jSKYSdKjcBSApANohyCRB
Score

8^/10

persistence
- Drops file in Drivers directory
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2