c00f51049aa248403146cda696c53aa3d604e60fc5e357fa2b951818072f2683 | Triage

Sharing

General

Target

c00f51049aa248403146cda696c53aa3d604e60fc5e357fa2b951818072f2683
Size

256KB
Sample

221126-27ckfscb73
MD5

812a6291b84391430a7400e16e769f65
SHA1

223cbd80e5001e5d2173b3934923efbdafd3fad8
SHA256

c00f51049aa248403146cda696c53aa3d604e60fc5e357fa2b951818072f2683
SHA512

49767285a2f1c4e68a2c3f38b0cb4833e83f5312d159d74df90f6da57f960aaeeaa2311e6916dff587b3aad1e85266d5057326cc4fbc3ed0f9670be35cc76b5a
SSDEEP

6144:YiaaWdkpSnIv/ax7JiAhmpsgSe/lW9+LxRZKC9:YrdNbyAtgjtaE

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  c00f51049aa248403146cda696c53aa3d604e60fc5e357fa2b951818072f2683
- Size
  
  256KB
- MD5
  
  812a6291b84391430a7400e16e769f65
- SHA1
  
  223cbd80e5001e5d2173b3934923efbdafd3fad8
- SHA256
  
  c00f51049aa248403146cda696c53aa3d604e60fc5e357fa2b951818072f2683
- SHA512
  
  49767285a2f1c4e68a2c3f38b0cb4833e83f5312d159d74df90f6da57f960aaeeaa2311e6916dff587b3aad1e85266d5057326cc4fbc3ed0f9670be35cc76b5a
- SSDEEP
  
  6144:YiaaWdkpSnIv/ax7JiAhmpsgSe/lW9+LxRZKC9:YrdNbyAtgjtaE
Score

8^/10

persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2