d8e2e4725ab608b93aa6f2520f6f31b2a18141bf0b609b1a8ef405a2c6d88404 | Triage

Sharing

General

Target

d8e2e4725ab608b93aa6f2520f6f31b2a18141bf0b609b1a8ef405a2c6d88404
Size

320KB
Sample

231010-zw9ppsdb37
MD5

cb4865661af00dfe1e773ea37a31c5a6
SHA1

d1fdf89922618d1eedae79bc9aa4d583fc4724b8
SHA256

d8e2e4725ab608b93aa6f2520f6f31b2a18141bf0b609b1a8ef405a2c6d88404
SHA512

02b9521d832d335c05e41a044428988e9ae641fe19d89805debcc39fb4bb4bcc3be93727f86ec0138c064d592f7c142f8f568cb06cf0496f654fbe56af91e061
SSDEEP

6144:MajdMJyFRe6azHqTG5WbWeF+WR4VyKh60yYB:x2JylsKTmW4VyPxYB

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  d8e2e4725ab608b93aa6f2520f6f31b2a18141bf0b609b1a8ef405a2c6d88404
- Size
  
  320KB
- MD5
  
  cb4865661af00dfe1e773ea37a31c5a6
- SHA1
  
  d1fdf89922618d1eedae79bc9aa4d583fc4724b8
- SHA256
  
  d8e2e4725ab608b93aa6f2520f6f31b2a18141bf0b609b1a8ef405a2c6d88404
- SHA512
  
  02b9521d832d335c05e41a044428988e9ae641fe19d89805debcc39fb4bb4bcc3be93727f86ec0138c064d592f7c142f8f568cb06cf0496f654fbe56af91e061
- SSDEEP
  
  6144:MajdMJyFRe6azHqTG5WbWeF+WR4VyKh60yYB:x2JylsKTmW4VyPxYB
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2