130608a012b4f2a0530f03c514ee98970af2d8a5b59ce4df65131497f9a5a19b | Triage

Sharing

General

Target

130608a012b4f2a0530f03c514ee98970af2d8a5b59ce4df65131497f9a5a19b
Size

508KB
Sample

240223-xbj77sfh4x
MD5

4f928378218475436eb1dd16f6c61e5f
SHA1

69f1ddc875ed2b943da2fac852772e4f95f66e1c
SHA256

130608a012b4f2a0530f03c514ee98970af2d8a5b59ce4df65131497f9a5a19b
SHA512

e13debaa71a2ebb4abfd4d19c55f132609e85aa53421691c22198fcffb78ffcdd06c8d2e0ba694acc08f0899b006ead63377ef36b646defda45cf73e8a1e8593
SSDEEP

12288:G7++0rrQQkFFP4oOJmqpwjy9oQNDbOpxozwzgA:G7q/kf0w9QofoSgA

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  130608a012b4f2a0530f03c514ee98970af2d8a5b59ce4df65131497f9a5a19b
- Size
  
  508KB
- MD5
  
  4f928378218475436eb1dd16f6c61e5f
- SHA1
  
  69f1ddc875ed2b943da2fac852772e4f95f66e1c
- SHA256
  
  130608a012b4f2a0530f03c514ee98970af2d8a5b59ce4df65131497f9a5a19b
- SHA512
  
  e13debaa71a2ebb4abfd4d19c55f132609e85aa53421691c22198fcffb78ffcdd06c8d2e0ba694acc08f0899b006ead63377ef36b646defda45cf73e8a1e8593
- SSDEEP
  
  12288:G7++0rrQQkFFP4oOJmqpwjy9oQNDbOpxozwzgA:G7q/kf0w9QofoSgA
Score

8^/10

persistence
- Manipulates Digital Signatures
  Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

SIP and Trust Provider Hijacking

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2