b99c9bc5ef3f472ad964b4c57659fd68b9397349092ff99078cd1f749d317e9e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b99c9bc5ef3f472ad964b4c57659fd68b9397349092ff99078cd1f749d317e9e
Size

64KB
Sample

221203-hapnzacc52
MD5

af957cb27d27110d7247208c493530fb
SHA1

8a07e846a8addff32aa7f66294a7ddb5d117db8c
SHA256

b99c9bc5ef3f472ad964b4c57659fd68b9397349092ff99078cd1f749d317e9e
SHA512

1ae912ac07ae8e3a7c2d2927142583fe5284902b55e59da941e57a1eaaeb2c02a9150d3cb924022677185a7725838745bc0d01671080e51e4d99f9ac6f35539a
SSDEEP

1536:IAA5lZpShf3mea5SFUTWCFp8gWXedinKfIG99BniPNLB:A5lZqfNkGUSel8edinKfJ9ZiPN

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  b99c9bc5ef3f472ad964b4c57659fd68b9397349092ff99078cd1f749d317e9e
- Size
  
  64KB
- MD5
  
  af957cb27d27110d7247208c493530fb
- SHA1
  
  8a07e846a8addff32aa7f66294a7ddb5d117db8c
- SHA256
  
  b99c9bc5ef3f472ad964b4c57659fd68b9397349092ff99078cd1f749d317e9e
- SHA512
  
  1ae912ac07ae8e3a7c2d2927142583fe5284902b55e59da941e57a1eaaeb2c02a9150d3cb924022677185a7725838745bc0d01671080e51e4d99f9ac6f35539a
- SSDEEP
  
  1536:IAA5lZpShf3mea5SFUTWCFp8gWXedinKfIG99BniPNLB:A5lZqfNkGUSel8edinKfJ9ZiPN
Score

7^/10

persistence
- Deletes itself
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2