78bed043d61e06e839d937a8c4b844f76d75c2d949e91cc1cf03dbd7c9a30ec7 | Triage

Sharing

General

Target

78bed043d61e06e839d937a8c4b844f76d75c2d949e91cc1cf03dbd7c9a30ec7
Size

294KB
Sample

221129-h9mnnabh7v
MD5

60aadc9933ed98b0a25480700d5c3554
SHA1

2835bbd42ec1c3dd3193a1229e10afa72a9aec89
SHA256

78bed043d61e06e839d937a8c4b844f76d75c2d949e91cc1cf03dbd7c9a30ec7
SHA512

7eb40b2f9112f09630b01546348b02f2c39e09e645405f4e4ea5e3eafd856b5a9c49a1a34d7d8e74bb3bc30c260733f683849df79a1601f19dfea3c06d75c1e3
SSDEEP

6144:GlRVNGgwHw95LiTL1esPYzACf4qZJ92sLoU1VvyxElDhrj2jFRSpYmX51N71YzeU:GlRSgwfiAjqrQsL3lDldajFRKV51N71+

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  78bed043d61e06e839d937a8c4b844f76d75c2d949e91cc1cf03dbd7c9a30ec7
- Size
  
  294KB
- MD5
  
  60aadc9933ed98b0a25480700d5c3554
- SHA1
  
  2835bbd42ec1c3dd3193a1229e10afa72a9aec89
- SHA256
  
  78bed043d61e06e839d937a8c4b844f76d75c2d949e91cc1cf03dbd7c9a30ec7
- SHA512
  
  7eb40b2f9112f09630b01546348b02f2c39e09e645405f4e4ea5e3eafd856b5a9c49a1a34d7d8e74bb3bc30c260733f683849df79a1601f19dfea3c06d75c1e3
- SSDEEP
  
  6144:GlRVNGgwHw95LiTL1esPYzACf4qZJ92sLoU1VvyxElDhrj2jFRSpYmX51N71YzeU:GlRSgwfiAjqrQsL3lDldajFRKV51N71+
Score

8^/10

persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2