d1347605b5e9e4f2abccb191bf81c25d4a05c13bd5f0716dfc0db227dce2bb47 | Triage

Sharing

General

Target

d1347605b5e9e4f2abccb191bf81c25d4a05c13bd5f0716dfc0db227dce2bb47
Size

61KB
Sample

221124-xjf6hscf37
MD5

7ee00ff9e7f44cc70e0183d46ccebe23
SHA1

a23c156a398db0a1124ca2fb0231699e5fb2adce
SHA256

d1347605b5e9e4f2abccb191bf81c25d4a05c13bd5f0716dfc0db227dce2bb47
SHA512

7f316f2f488cd6e69b0b884ac2377e77362d8f84abb0a6cafd7a0c3af5e15974d8edb1de51d387a1babf83266d1128cadaf005d4c2f291b4ea10eb6aa1cab133
SSDEEP

1536:9Pwn50P37V5W8Y5aRW3BpS8IVPqulam3jHRD+llb:905237V5jY5aRWxpYPKm3j9+7

Score

8^/10

evasion persistence

Malware Config

Targets

- Target
  
  d1347605b5e9e4f2abccb191bf81c25d4a05c13bd5f0716dfc0db227dce2bb47
- Size
  
  61KB
- MD5
  
  7ee00ff9e7f44cc70e0183d46ccebe23
- SHA1
  
  a23c156a398db0a1124ca2fb0231699e5fb2adce
- SHA256
  
  d1347605b5e9e4f2abccb191bf81c25d4a05c13bd5f0716dfc0db227dce2bb47
- SHA512
  
  7f316f2f488cd6e69b0b884ac2377e77362d8f84abb0a6cafd7a0c3af5e15974d8edb1de51d387a1babf83266d1128cadaf005d4c2f291b4ea10eb6aa1cab133
- SSDEEP
  
  1536:9Pwn50P37V5W8Y5aRW3BpS8IVPqulam3jHRD+llb:905237V5jY5aRWxpYPKm3j9+7
Score

8^/10

evasion persistence
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence