85a57bb3801c013526929c5a1733eb2a20354f02fdcdb878428b6ff519b0b21d | Triage

Sharing

General

Target

85a57bb3801c013526929c5a1733eb2a20354f02fdcdb878428b6ff519b0b21d
Size

7.9MB
Sample

231117-xe2lnacg26
MD5

e2c5d569f851209d7a8c5cffcf3cf082
SHA1

82b1c453494e0190d4b4c8a66c5663a0e0826288
SHA256

85a57bb3801c013526929c5a1733eb2a20354f02fdcdb878428b6ff519b0b21d
SHA512

a069b15eee09f25027adaf99c45b7a5012c531d981c4b2c8c7673ac88c09e7b2b28fd8be8cc169395aa75ef07c21ac11dd8eef70da03f18aea858da55d3fc100
SSDEEP

196608:TOc3ngwaOmuH3PHJeqslY64iKjkVgfakqgrox:TO4ghYfJe/74iKjk+fangEx

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  85a57bb3801c013526929c5a1733eb2a20354f02fdcdb878428b6ff519b0b21d
- Size
  
  7.9MB
- MD5
  
  e2c5d569f851209d7a8c5cffcf3cf082
- SHA1
  
  82b1c453494e0190d4b4c8a66c5663a0e0826288
- SHA256
  
  85a57bb3801c013526929c5a1733eb2a20354f02fdcdb878428b6ff519b0b21d
- SHA512
  
  a069b15eee09f25027adaf99c45b7a5012c531d981c4b2c8c7673ac88c09e7b2b28fd8be8cc169395aa75ef07c21ac11dd8eef70da03f18aea858da55d3fc100
- SSDEEP
  
  196608:TOc3ngwaOmuH3PHJeqslY64iKjkVgfakqgrox:TO4ghYfJe/74iKjk+fangEx
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2