b5ce5ba34ef0c7eca1b85c0d7396e19631d50f94db1957b807cfd4a02a05354e | Triage

Sharing

General

Target

b5ce5ba34ef0c7eca1b85c0d7396e19631d50f94db1957b807cfd4a02a05354e
Size

380KB
Sample

221206-xzwwxahg8w
MD5

cf1812d681e04ce29fb722887554418d
SHA1

18c2fd6b5f04ec343e6266a905651b34e0898eaa
SHA256

b5ce5ba34ef0c7eca1b85c0d7396e19631d50f94db1957b807cfd4a02a05354e
SHA512

6f023666c8473ca19a200680ae9b43f4c219c67c2035e90a9a746c8607c75b54d42388aa9bb9f3fd9066e2979661d8cf035a0584611c99c8bb42433c92859372
SSDEEP

6144:rM2v/JT0N5hwEtS1Wtrpub1V/8oA9sJlZfiUTP/pAClP0pAivpmU0ovY:bJMhwEtS1SY1V/wmTZqUTPm3bvpx0o

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  b5ce5ba34ef0c7eca1b85c0d7396e19631d50f94db1957b807cfd4a02a05354e
- Size
  
  380KB
- MD5
  
  cf1812d681e04ce29fb722887554418d
- SHA1
  
  18c2fd6b5f04ec343e6266a905651b34e0898eaa
- SHA256
  
  b5ce5ba34ef0c7eca1b85c0d7396e19631d50f94db1957b807cfd4a02a05354e
- SHA512
  
  6f023666c8473ca19a200680ae9b43f4c219c67c2035e90a9a746c8607c75b54d42388aa9bb9f3fd9066e2979661d8cf035a0584611c99c8bb42433c92859372
- SSDEEP
  
  6144:rM2v/JT0N5hwEtS1Wtrpub1V/8oA9sJlZfiUTP/pAClP0pAivpmU0ovY:bJMhwEtS1SY1V/wmTZqUTPm3bvpx0o
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence