d209a48767a1c7c66a427777b4c76b6b212d35f5a5966712dd4b7d1b83391d2f | Triage

Sharing

General

Target

d209a48767a1c7c66a427777b4c76b6b212d35f5a5966712dd4b7d1b83391d2f
Size

36KB
Sample

221203-et7gcagf81
MD5

48063d774ac852c5d3fac696560547a3
SHA1

65c742fd7428f3d82e04bcbf65d4e0336edd4258
SHA256

d209a48767a1c7c66a427777b4c76b6b212d35f5a5966712dd4b7d1b83391d2f
SHA512

a0154f23191a3e40f71742d11f6e2d355f4ba4e16af0e77d8a43ad5ab9293d593f411142634429d63875fbf29654cbd56213ea854f39eafcc58e4cfb3c36812d
SSDEEP

384:80mHZEPg4thgWNSDu+iyC6pM8wc9Km7P9:80mHx78SPiyCss

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  d209a48767a1c7c66a427777b4c76b6b212d35f5a5966712dd4b7d1b83391d2f
- Size
  
  36KB
- MD5
  
  48063d774ac852c5d3fac696560547a3
- SHA1
  
  65c742fd7428f3d82e04bcbf65d4e0336edd4258
- SHA256
  
  d209a48767a1c7c66a427777b4c76b6b212d35f5a5966712dd4b7d1b83391d2f
- SHA512
  
  a0154f23191a3e40f71742d11f6e2d355f4ba4e16af0e77d8a43ad5ab9293d593f411142634429d63875fbf29654cbd56213ea854f39eafcc58e4cfb3c36812d
- SSDEEP
  
  384:80mHZEPg4thgWNSDu+iyC6pM8wc9Km7P9:80mHx78SPiyCss
Score

8^/10

persistence
- Adds policy Run key to start application
  persistence
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2