5045b4378358a2f1b6645c0a4a5307c250d3af2bae7858de818c034f20d76403 | Triage

Sharing

General

Target

5045b4378358a2f1b6645c0a4a5307c250d3af2bae7858de818c034f20d76403
Size

35KB
Sample

221124-bneycscf7y
MD5

00a5b5b4a07b9744a677942a80b3b0b1
SHA1

7ca1c820bb7e271b5130afe4b1eaa49114dd6007
SHA256

5045b4378358a2f1b6645c0a4a5307c250d3af2bae7858de818c034f20d76403
SHA512

943931c66aebde735b5cea88726e2c4bf8638ddb7655b042f0748192e160335aece1d864f528cc41daa4a5fed19188603c61d112db3638f3f9b610a4669f6f56
SSDEEP

384:ATG3VWrsS7gscdw9Ln+nYjngDb3LJObhYu495xgNQIiqis9QlcffyqgeEdQ/Nb3b:vS7gNd4nrq3LgGNIOOisKl4qbNAb22Z

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  5045b4378358a2f1b6645c0a4a5307c250d3af2bae7858de818c034f20d76403
- Size
  
  35KB
- MD5
  
  00a5b5b4a07b9744a677942a80b3b0b1
- SHA1
  
  7ca1c820bb7e271b5130afe4b1eaa49114dd6007
- SHA256
  
  5045b4378358a2f1b6645c0a4a5307c250d3af2bae7858de818c034f20d76403
- SHA512
  
  943931c66aebde735b5cea88726e2c4bf8638ddb7655b042f0748192e160335aece1d864f528cc41daa4a5fed19188603c61d112db3638f3f9b610a4669f6f56
- SSDEEP
  
  384:ATG3VWrsS7gscdw9Ln+nYjngDb3LJObhYu495xgNQIiqis9QlcffyqgeEdQ/Nb3b:vS7gNd4nrq3LgGNIOOisKl4qbNAb22Z
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2