5761c85f4e1c6446eaab24dbd880540ae9d35e933e87abb7f2c6d507c12b31f8 | Triage

Sharing

General

Target

5761c85f4e1c6446eaab24dbd880540ae9d35e933e87abb7f2c6d507c12b31f8
Size

2.7MB
Sample

230828-s5dv3afd31
MD5

660fee023f8e429c26de979b6221a5e1
SHA1

072f200e70f3f230d5fd9dbea0b419a91da8a7b8
SHA256

5761c85f4e1c6446eaab24dbd880540ae9d35e933e87abb7f2c6d507c12b31f8
SHA512

68a68b43b29206fa03d53794daabb7477e0f4fc76474ebef4b75af0e2b82e13882d2008e64300cdbd521995d50eff1be49c7766c0c2547217e2d439209c0136d
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTl3Iur7Ye0d0N:Q+8X9G3vP3AMZbr7Y6N

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  5761c85f4e1c6446eaab24dbd880540ae9d35e933e87abb7f2c6d507c12b31f8
- Size
  
  2.7MB
- MD5
  
  660fee023f8e429c26de979b6221a5e1
- SHA1
  
  072f200e70f3f230d5fd9dbea0b419a91da8a7b8
- SHA256
  
  5761c85f4e1c6446eaab24dbd880540ae9d35e933e87abb7f2c6d507c12b31f8
- SHA512
  
  68a68b43b29206fa03d53794daabb7477e0f4fc76474ebef4b75af0e2b82e13882d2008e64300cdbd521995d50eff1be49c7766c0c2547217e2d439209c0136d
- SSDEEP
  
  49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTl3Iur7Ye0d0N:Q+8X9G3vP3AMZbr7Y6N
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2