86a17a3bbc629d8a412f7c2eb2172ffb3d78452060c7948414ffd65632467d7e | Triage

Sharing

General

Target

86a17a3bbc629d8a412f7c2eb2172ffb3d78452060c7948414ffd65632467d7e
Size

3.5MB
Sample

221125-j797lsgg8y
MD5

d30f10396d4286cc6a6973ca03bdaf78
SHA1

f30c7e03be7d13c96f4762ff55389b7bc3796be9
SHA256

86a17a3bbc629d8a412f7c2eb2172ffb3d78452060c7948414ffd65632467d7e
SHA512

bae1f43c19b27600bd8ca2ef412476cc020f143b9660233c1950f076e2994742f12a4594c50f1407bdb81ba0377c38b1411918aaac431930c2f5871bd4f7c76a
SSDEEP

98304:c2IFlMWJAUq/BonAYay7xODaeAxgcP6wzur:nQB7ODPA3zur

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  86a17a3bbc629d8a412f7c2eb2172ffb3d78452060c7948414ffd65632467d7e
- Size
  
  3.5MB
- MD5
  
  d30f10396d4286cc6a6973ca03bdaf78
- SHA1
  
  f30c7e03be7d13c96f4762ff55389b7bc3796be9
- SHA256
  
  86a17a3bbc629d8a412f7c2eb2172ffb3d78452060c7948414ffd65632467d7e
- SHA512
  
  bae1f43c19b27600bd8ca2ef412476cc020f143b9660233c1950f076e2994742f12a4594c50f1407bdb81ba0377c38b1411918aaac431930c2f5871bd4f7c76a
- SSDEEP
  
  98304:c2IFlMWJAUq/BonAYay7xODaeAxgcP6wzur:nQB7ODPA3zur
Score

8^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2