779711b6be304ce41f096d771cc4b93bf368eed8bcd7d1b84a4ca188a610bbbf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

779711b6be304ce41f096d771cc4b93bf368eed8bcd7d1b84a4ca188a610bbbf
Size

33KB
Sample

221201-2l43kshc37
MD5

6dbfbb317e593d1875858fcc8a9f58aa
SHA1

cdb2deb2ed26b5b8d453cb77ec42a40263caa38d
SHA256

779711b6be304ce41f096d771cc4b93bf368eed8bcd7d1b84a4ca188a610bbbf
SHA512

68cccf0ed51c20df676744c4866f82a0762603942ee6a9d74954b0dc1bcbe9c27f342953021da33d330aa7f8612bd2acf58484822ae7d8181f0750dcaf115d31
SSDEEP

384:51AF6ahsp3fJKEa2/EIa0CPfi/cMuBhm8Aom1l9CQAL:5g5ip3fgEJYPfiEMGM8AnrPAL

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  779711b6be304ce41f096d771cc4b93bf368eed8bcd7d1b84a4ca188a610bbbf
- Size
  
  33KB
- MD5
  
  6dbfbb317e593d1875858fcc8a9f58aa
- SHA1
  
  cdb2deb2ed26b5b8d453cb77ec42a40263caa38d
- SHA256
  
  779711b6be304ce41f096d771cc4b93bf368eed8bcd7d1b84a4ca188a610bbbf
- SHA512
  
  68cccf0ed51c20df676744c4866f82a0762603942ee6a9d74954b0dc1bcbe9c27f342953021da33d330aa7f8612bd2acf58484822ae7d8181f0750dcaf115d31
- SSDEEP
  
  384:51AF6ahsp3fJKEa2/EIa0CPfi/cMuBhm8Aom1l9CQAL:5g5ip3fgEJYPfiEMGM8AnrPAL
Score

8^/10

persistence
- Adds policy Run key to start application
  persistence
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2