56f3ac3db61aac1b99aed7a0720336d12a57cc65a879673b61e3dc0b35a06c1a | Triage

Sharing

General

Target

7dd27f715f05414b8d1681ddc2cd7d79
Size

68KB
Sample

240128-x91ylsabhn
MD5

7dd27f715f05414b8d1681ddc2cd7d79
SHA1

5db9a9925d8c6406e4fccfc4d00499dbf936be3c
SHA256

56f3ac3db61aac1b99aed7a0720336d12a57cc65a879673b61e3dc0b35a06c1a
SHA512

8938ce39361794fffea7e4ad09282877572c1bbee4ee120b5f95e0d434eea8c2de61eb0ca41d535be24a7b4dcc6334710131e9c6d2ab06ef2f4bc8a845dd8283
SSDEEP

1536:YSCwFep1p/Rac0dEPH2d41e0+MCrvRr2oNBZ1jyCEO1r:YVwwUdEud41e0+M4vRzN9yCEO1r

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  7dd27f715f05414b8d1681ddc2cd7d79
- Size
  
  68KB
- MD5
  
  7dd27f715f05414b8d1681ddc2cd7d79
- SHA1
  
  5db9a9925d8c6406e4fccfc4d00499dbf936be3c
- SHA256
  
  56f3ac3db61aac1b99aed7a0720336d12a57cc65a879673b61e3dc0b35a06c1a
- SHA512
  
  8938ce39361794fffea7e4ad09282877572c1bbee4ee120b5f95e0d434eea8c2de61eb0ca41d535be24a7b4dcc6334710131e9c6d2ab06ef2f4bc8a845dd8283
- SSDEEP
  
  1536:YSCwFep1p/Rac0dEPH2d41e0+MCrvRr2oNBZ1jyCEO1r:YVwwUdEud41e0+M4vRzN9yCEO1r
Score

8^/10

evasion
- Looks for VMWare Tools registry key
  evasion
- Deletes itself
- Executes dropped EXE
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2