f86eb333a80b047631a1ad350885da0f13736d7f56b2351f419caffaf980d084 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f86eb333a80b047631a1ad350885da0f13736d7f56b2351f419caffaf980d084
Size

1.9MB
Sample

221129-ne8wasdf34
MD5

d1fd068825c57d73bd37e6af7b5c3363
SHA1

bf7ab0542a5b7cddd94d8b5a9eb13c908c0738f0
SHA256

f86eb333a80b047631a1ad350885da0f13736d7f56b2351f419caffaf980d084
SHA512

03d60ebe21f02580b0a06378cd4fe9f48fbdb35ae66465209cdf735603861c3f92f95e453685f40a06b0019eeb906f67f7968e7d0bbdeb1daae1478cf5cb1de2
SSDEEP

24576:77HK5N+cLJKQmHzrV3nMk0cQUTDP4yfrF+awF9mZHMK1b8YWU/C4PYCLiObCxqjj:/SNHduBMk0aDP4yDFVKmmK1gYWOPo8EE

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  f86eb333a80b047631a1ad350885da0f13736d7f56b2351f419caffaf980d084
- Size
  
  1.9MB
- MD5
  
  d1fd068825c57d73bd37e6af7b5c3363
- SHA1
  
  bf7ab0542a5b7cddd94d8b5a9eb13c908c0738f0
- SHA256
  
  f86eb333a80b047631a1ad350885da0f13736d7f56b2351f419caffaf980d084
- SHA512
  
  03d60ebe21f02580b0a06378cd4fe9f48fbdb35ae66465209cdf735603861c3f92f95e453685f40a06b0019eeb906f67f7968e7d0bbdeb1daae1478cf5cb1de2
- SSDEEP
  
  24576:77HK5N+cLJKQmHzrV3nMk0cQUTDP4yfrF+awF9mZHMK1b8YWU/C4PYCLiObCxqjj:/SNHduBMk0aDP4yDFVKmmK1gYWOPo8EE
Score

8^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2