55022c1177c00c3e6e87a4c06798b17ce6f06b02763d2bde8423c320db49b3ae | Triage

Sharing

General

Target

55022c1177c00c3e6e87a4c06798b17ce6f06b02763d2bde8423c320db49b3ae
Size

3.5MB
Sample

231003-pkbnesce44
MD5

c7bb58688944bc15721d3185d6bacf8f
SHA1

7fd37ca6f6174fe770d38f3ce312c59069d4109c
SHA256

55022c1177c00c3e6e87a4c06798b17ce6f06b02763d2bde8423c320db49b3ae
SHA512

b617ea5d5192315ac30693896f99c1f398f8f9225b57fbe7bf94b4966d6281457a113fa174f5af7595707d577dca2dcaa867079e9cebf4f39a691a9e6a376b0f
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTloSuyutbmNBdnCTl7COlia1ug:c+8X9G3vP3AM2zhKjdCTRCOse

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  55022c1177c00c3e6e87a4c06798b17ce6f06b02763d2bde8423c320db49b3ae
- Size
  
  3.5MB
- MD5
  
  c7bb58688944bc15721d3185d6bacf8f
- SHA1
  
  7fd37ca6f6174fe770d38f3ce312c59069d4109c
- SHA256
  
  55022c1177c00c3e6e87a4c06798b17ce6f06b02763d2bde8423c320db49b3ae
- SHA512
  
  b617ea5d5192315ac30693896f99c1f398f8f9225b57fbe7bf94b4966d6281457a113fa174f5af7595707d577dca2dcaa867079e9cebf4f39a691a9e6a376b0f
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTloSuyutbmNBdnCTl7COlia1ug:c+8X9G3vP3AM2zhKjdCTRCOse
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2