aa36af1a98c25875bdd1929057ed181776bb12d47c63e358b0e0b57cb52bc67f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4af2502787459a5d71759ebd32dfc2e3
Size

415KB
Sample

231219-sjq89sdga5
MD5

4af2502787459a5d71759ebd32dfc2e3
SHA1

1d5daa008e61460b2208445941587a48e4c9ce5c
SHA256

aa36af1a98c25875bdd1929057ed181776bb12d47c63e358b0e0b57cb52bc67f
SHA512

262b8a4bb8715a5a2a3b5c608148874a3e9eb77f252bbfaae913c95317da4289c4c4195650211e30546a3f2dd891f51c6ef1d32e8db106944c05b87d2b6393f9
SSDEEP

6144:AajdMJb6SqIqOq2eJCdlCgyVQr1ponNdO+bfPcvbdK9NT4xO6D:92JbM2yYl9yqqNb+dK9Nc

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  4af2502787459a5d71759ebd32dfc2e3
- Size
  
  415KB
- MD5
  
  4af2502787459a5d71759ebd32dfc2e3
- SHA1
  
  1d5daa008e61460b2208445941587a48e4c9ce5c
- SHA256
  
  aa36af1a98c25875bdd1929057ed181776bb12d47c63e358b0e0b57cb52bc67f
- SHA512
  
  262b8a4bb8715a5a2a3b5c608148874a3e9eb77f252bbfaae913c95317da4289c4c4195650211e30546a3f2dd891f51c6ef1d32e8db106944c05b87d2b6393f9
- SSDEEP
  
  6144:AajdMJb6SqIqOq2eJCdlCgyVQr1ponNdO+bfPcvbdK9NT4xO6D:92JbM2yYl9yqqNb+dK9Nc
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2