c86d04ed9c99b7702aef2a7b378ff05efb9ac2502918246928bf455dff7a2344 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c86d04ed9c99b7702aef2a7b378ff05efb9ac2502918246928bf455dff7a2344
Size

223KB
Sample

221203-yqb1taeg4x
MD5

005e1461e87148e28c84efd4f3951ca0
SHA1

10d5fa84c039b91bf69b454da45883506b6fbee2
SHA256

c86d04ed9c99b7702aef2a7b378ff05efb9ac2502918246928bf455dff7a2344
SHA512

1a18b16f21f93e620ef28bde4e9a422803691e955644714240ccd10cef81c08a61532af8f0bd258d5fc4dbc62ab70234e90f4b88cb46580a93ea918f7f347e8d
SSDEEP

1536:fIpKX8quv7HjNp199xW96ZCVh8s4aBQFNpCeB+DI3GQkVLNSLUUkh1hC7u6WT5lw:f4qiDNpGVh89Cg0RdXtK9r4U8zW90s

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  c86d04ed9c99b7702aef2a7b378ff05efb9ac2502918246928bf455dff7a2344
- Size
  
  223KB
- MD5
  
  005e1461e87148e28c84efd4f3951ca0
- SHA1
  
  10d5fa84c039b91bf69b454da45883506b6fbee2
- SHA256
  
  c86d04ed9c99b7702aef2a7b378ff05efb9ac2502918246928bf455dff7a2344
- SHA512
  
  1a18b16f21f93e620ef28bde4e9a422803691e955644714240ccd10cef81c08a61532af8f0bd258d5fc4dbc62ab70234e90f4b88cb46580a93ea918f7f347e8d
- SSDEEP
  
  1536:fIpKX8quv7HjNp199xW96ZCVh8s4aBQFNpCeB+DI3GQkVLNSLUUkh1hC7u6WT5lw:f4qiDNpGVh89Cg0RdXtK9r4U8zW90s
Score

10^/10

evasion persistence
- Modifies visiblity of hidden/system files in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2