a3e28caca668e40584ace8b831d075ed4f5b49790afca34e785c0221bd44b02b | Triage

Sharing

General

Target

a3e28caca668e40584ace8b831d075ed4f5b49790afca34e785c0221bd44b02b
Size

46KB
Sample

221201-yzm5faga85
MD5

54e5eed809442140c88b4ae73c41c51a
SHA1

3d92841336297b56e0f02d8033dbad87dc49836a
SHA256

a3e28caca668e40584ace8b831d075ed4f5b49790afca34e785c0221bd44b02b
SHA512

837113ad53caa805be80f6e480aac3d5ef8593da1db4cb30ee697b8675de68490ffdc5e08a751897a0ce739416951a3c44ae0a9ee2dd8635bf4133a4cb8a5b69
SSDEEP

768:e+ETv/8BMAANegaRsdedroXYqC6AYOsN8Ix225/xqN9aSFn201MdAS:/gvEBbANbamsuXY96AbsN8Ix2A/xS/Nw

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  a3e28caca668e40584ace8b831d075ed4f5b49790afca34e785c0221bd44b02b
- Size
  
  46KB
- MD5
  
  54e5eed809442140c88b4ae73c41c51a
- SHA1
  
  3d92841336297b56e0f02d8033dbad87dc49836a
- SHA256
  
  a3e28caca668e40584ace8b831d075ed4f5b49790afca34e785c0221bd44b02b
- SHA512
  
  837113ad53caa805be80f6e480aac3d5ef8593da1db4cb30ee697b8675de68490ffdc5e08a751897a0ce739416951a3c44ae0a9ee2dd8635bf4133a4cb8a5b69
- SSDEEP
  
  768:e+ETv/8BMAANegaRsdedroXYqC6AYOsN8Ix225/xqN9aSFn201MdAS:/gvEBbANbamsuXY96AbsN8Ix2A/xS/Nw
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2