General

  • Target

    5b17710ae6e37bdd4c03641bf98ec1bf97d847b6c799fdfb350360265a4bbaac

  • Size

    354KB

  • Sample

    221125-jpqegsca39

  • MD5

    a7cf9123614b02be90d0504275c2c96f

  • SHA1

    1d77e1a9ad0d05c4d957d98e7e0b22286eedec6a

  • SHA256

    5b17710ae6e37bdd4c03641bf98ec1bf97d847b6c799fdfb350360265a4bbaac

  • SHA512

    dee6370517f8664adb3128b041a8e5aedb75c6cbce863bc1482cc88bb3859419f00fbba97e3857d4099a5a7cb09e6dcb6d0f09aafd05be8e0e54495ca032ff6a

  • SSDEEP

    6144:npsA1C8dh8iba3yCvAHEAx9J5JMH6dkAOjEczMcf1kMvVkRIAWA:pJjdkAx9J5JMHHBHzFvqMA

Score
6/10

Malware Config

Targets

    • Target

      5b17710ae6e37bdd4c03641bf98ec1bf97d847b6c799fdfb350360265a4bbaac

    • Size

      354KB

    • MD5

      a7cf9123614b02be90d0504275c2c96f

    • SHA1

      1d77e1a9ad0d05c4d957d98e7e0b22286eedec6a

    • SHA256

      5b17710ae6e37bdd4c03641bf98ec1bf97d847b6c799fdfb350360265a4bbaac

    • SHA512

      dee6370517f8664adb3128b041a8e5aedb75c6cbce863bc1482cc88bb3859419f00fbba97e3857d4099a5a7cb09e6dcb6d0f09aafd05be8e0e54495ca032ff6a

    • SSDEEP

      6144:npsA1C8dh8iba3yCvAHEAx9J5JMH6dkAOjEczMcf1kMvVkRIAWA:pJjdkAx9J5JMHHBHzFvqMA

    Score
    6/10
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks