26aca2678efb57982f1e7085ba7c1f3d48030d7855610658b721e35adec05e23 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Deluxe_StatistiquePVA.exe
Size

427KB
Sample

231117-pwtndaac9z
MD5

541876f0ec6ccc1a1330fdf0e1a1ab02
SHA1

da1d4170a2d1efa2b963c1311621edb458d118c3
SHA256

26aca2678efb57982f1e7085ba7c1f3d48030d7855610658b721e35adec05e23
SHA512

d873c7157497741bfc18ff8ec5918f64a43b955b84490460410d03a2f0bb66bafbf49916051bc56b4ede88c904d530e5213ae8911149ed353b00d3a6b17c037a
SSDEEP

12288:ayqjSrPCa7r1NmpXmsu8wKdEyyisRxBPLsMJI2IGZTJ:ayhbkj3dB0C2TJ

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  Deluxe_StatistiquePVA.exe
- Size
  
  427KB
- MD5
  
  541876f0ec6ccc1a1330fdf0e1a1ab02
- SHA1
  
  da1d4170a2d1efa2b963c1311621edb458d118c3
- SHA256
  
  26aca2678efb57982f1e7085ba7c1f3d48030d7855610658b721e35adec05e23
- SHA512
  
  d873c7157497741bfc18ff8ec5918f64a43b955b84490460410d03a2f0bb66bafbf49916051bc56b4ede88c904d530e5213ae8911149ed353b00d3a6b17c037a
- SSDEEP
  
  12288:ayqjSrPCa7r1NmpXmsu8wKdEyyisRxBPLsMJI2IGZTJ:ayhbkj3dB0C2TJ
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2