71119726fd5e8837b95ea389e2c4e9b478e3350d589adfd07ddd8588911f7914 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71119726fd5e8837b95ea389e2c4e9b478e3350d589adfd07ddd8588911f7914
Size

43KB
Sample

221129-jtrhcadf5z
MD5

5c49b80d64f5f67ff5fa778949f0ec12
SHA1

063e95e85942c1034c8ba23af5cc801ec604b8da
SHA256

71119726fd5e8837b95ea389e2c4e9b478e3350d589adfd07ddd8588911f7914
SHA512

9ad6a05efd98a26720779e380a850090b2b49b3dfaa47ee28cfdebee90ffa48e349addbad9e1ae780d0d722d1be6564da7922d62fe22e58b8d333d5ad6cdbb16
SSDEEP

768:8nE0OhJ2V/xLCHbXLFDbvQVmLpqSQVmLpq:4NOyVhw79bfL

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  71119726fd5e8837b95ea389e2c4e9b478e3350d589adfd07ddd8588911f7914
- Size
  
  43KB
- MD5
  
  5c49b80d64f5f67ff5fa778949f0ec12
- SHA1
  
  063e95e85942c1034c8ba23af5cc801ec604b8da
- SHA256
  
  71119726fd5e8837b95ea389e2c4e9b478e3350d589adfd07ddd8588911f7914
- SHA512
  
  9ad6a05efd98a26720779e380a850090b2b49b3dfaa47ee28cfdebee90ffa48e349addbad9e1ae780d0d722d1be6564da7922d62fe22e58b8d333d5ad6cdbb16
- SSDEEP
  
  768:8nE0OhJ2V/xLCHbXLFDbvQVmLpqSQVmLpq:4NOyVhw79bfL
Score

8^/10

persistence
- Blocklisted process makes network request
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2