b96221f226159d9461dd1609166d73bfd57730dd845e872ea009dd6bb5b66a25 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b96221f226159d9461dd1609166d73bfd57730dd845e872ea009dd6bb5b66a25
Size

33KB
Sample

221203-rt5c7scf6s
MD5

68bf112ea8731c059f5ce8c342e5eb78
SHA1

f7192a5de3077f94a57a0e3117f2adf07d80d89e
SHA256

b96221f226159d9461dd1609166d73bfd57730dd845e872ea009dd6bb5b66a25
SHA512

c60bd9a0ee366620b6d49109f5594e5fa11a0abbd95fd36dbff77649a0be10028324a6b366732a99387ea4930af0318d6d4f31a0b5a29550a0fcabf7d15ddcd5
SSDEEP

384:u1AF6ahsp3fJKEa2/EIa0CPfi/cMuBhm8Aom1l9CQAL:ug5ip3fgEJYPfiEMGM8AnrPAL

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  b96221f226159d9461dd1609166d73bfd57730dd845e872ea009dd6bb5b66a25
- Size
  
  33KB
- MD5
  
  68bf112ea8731c059f5ce8c342e5eb78
- SHA1
  
  f7192a5de3077f94a57a0e3117f2adf07d80d89e
- SHA256
  
  b96221f226159d9461dd1609166d73bfd57730dd845e872ea009dd6bb5b66a25
- SHA512
  
  c60bd9a0ee366620b6d49109f5594e5fa11a0abbd95fd36dbff77649a0be10028324a6b366732a99387ea4930af0318d6d4f31a0b5a29550a0fcabf7d15ddcd5
- SSDEEP
  
  384:u1AF6ahsp3fJKEa2/EIa0CPfi/cMuBhm8Aom1l9CQAL:ug5ip3fgEJYPfiEMGM8AnrPAL
Score

8^/10

persistence
- Adds policy Run key to start application
  persistence
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2