720736e1ef8f083f0cd38b87331a42bee66aeff66aaefadf60d1575e6edb975b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

720736e1ef8f083f0cd38b87331a42bee66aeff66aaefadf60d1575e6edb975b
Size

558KB
Sample

221205-qy99ksed77
MD5

3078d175d9290669cc91110fb6b181e0
SHA1

f5c98b1720fbb04f2e7a9903a70d3006a77ee249
SHA256

720736e1ef8f083f0cd38b87331a42bee66aeff66aaefadf60d1575e6edb975b
SHA512

7c3838c9e1ef648dbf4c799b786b504819c12978ffe1a7aef1c976b7a5f04b76df598412b4a69548cb57924331e28046ca9bf5b03cfe0a67ee1918f2dedb0bb6
SSDEEP

12288:4i/7dcicGyyWLSykm4ygZeF7o8KqTNKYQR82Afk:r5/yyWLym4VQo8KUpX6

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  720736e1ef8f083f0cd38b87331a42bee66aeff66aaefadf60d1575e6edb975b
- Size
  
  558KB
- MD5
  
  3078d175d9290669cc91110fb6b181e0
- SHA1
  
  f5c98b1720fbb04f2e7a9903a70d3006a77ee249
- SHA256
  
  720736e1ef8f083f0cd38b87331a42bee66aeff66aaefadf60d1575e6edb975b
- SHA512
  
  7c3838c9e1ef648dbf4c799b786b504819c12978ffe1a7aef1c976b7a5f04b76df598412b4a69548cb57924331e28046ca9bf5b03cfe0a67ee1918f2dedb0bb6
- SSDEEP
  
  12288:4i/7dcicGyyWLSykm4ygZeF7o8KqTNKYQR82Afk:r5/yyWLym4VQo8KUpX6
Score

8^/10

persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2