b6a1cc57b18a704c8a46f8439c8e6d5cd693f5d33a351a862c691dd18514aeb2 | Triage

Sharing

General

Target

b6a1cc57b18a704c8a46f8439c8e6d5cd693f5d33a351a862c691dd18514aeb2
Size

36KB
Sample

221203-hk4kwage51
MD5

3148bdd351b9e48bef500bcc61f20e23
SHA1

8819d88d291a1d52fcd3a6e3a41197a0a929d692
SHA256

b6a1cc57b18a704c8a46f8439c8e6d5cd693f5d33a351a862c691dd18514aeb2
SHA512

97ab9355dcad6fc5aa0de3d52b1bd816680b53f76139ac58a4aab6b9f83f40a00d7ac04f7f98fc728a50825a4dcee3b1ec2c2ea3cbafdae9e6f1f9d90ceceda9
SSDEEP

384:hJEKyf3ZE3s4Mphzji0aXIP7Z99JBu5cw:3EPf3fHT97V3Oc

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  b6a1cc57b18a704c8a46f8439c8e6d5cd693f5d33a351a862c691dd18514aeb2
- Size
  
  36KB
- MD5
  
  3148bdd351b9e48bef500bcc61f20e23
- SHA1
  
  8819d88d291a1d52fcd3a6e3a41197a0a929d692
- SHA256
  
  b6a1cc57b18a704c8a46f8439c8e6d5cd693f5d33a351a862c691dd18514aeb2
- SHA512
  
  97ab9355dcad6fc5aa0de3d52b1bd816680b53f76139ac58a4aab6b9f83f40a00d7ac04f7f98fc728a50825a4dcee3b1ec2c2ea3cbafdae9e6f1f9d90ceceda9
- SSDEEP
  
  384:hJEKyf3ZE3s4Mphzji0aXIP7Z99JBu5cw:3EPf3fHT97V3Oc
Score

8^/10

persistence
- Adds policy Run key to start application
  persistence
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2