acd7a6deb70b5bbf219b6e503494fd4e857b70d481936dc2decce835f4dea928 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acd7a6deb70b5bbf219b6e503494fd4e857b70d481936dc2decce835f4dea928
Size

596KB
Sample

240224-d5l44sgh2y
MD5

b67c11cae2b1287bf7b6feb3c2c07d32
SHA1

54df9bd18077652d409247341207ca7585637915
SHA256

acd7a6deb70b5bbf219b6e503494fd4e857b70d481936dc2decce835f4dea928
SHA512

ac3fd9ff66638b8b454276b93ce7c4b8d237bf23a612e15820a132f35106903f891b5bdeab8b6f6cdcdbe8e6caa030a5b4bd27c638e156c4709d22b9b4d95ae0
SSDEEP

12288:x2JylsKTZW4VyPgPruypIGXwUs+Lr5S/SuxOBlyO1UdWXkB:x2Jyxs4V1y2I6Vs9cydWXkB

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  acd7a6deb70b5bbf219b6e503494fd4e857b70d481936dc2decce835f4dea928
- Size
  
  596KB
- MD5
  
  b67c11cae2b1287bf7b6feb3c2c07d32
- SHA1
  
  54df9bd18077652d409247341207ca7585637915
- SHA256
  
  acd7a6deb70b5bbf219b6e503494fd4e857b70d481936dc2decce835f4dea928
- SHA512
  
  ac3fd9ff66638b8b454276b93ce7c4b8d237bf23a612e15820a132f35106903f891b5bdeab8b6f6cdcdbe8e6caa030a5b4bd27c638e156c4709d22b9b4d95ae0
- SSDEEP
  
  12288:x2JylsKTZW4VyPgPruypIGXwUs+Lr5S/SuxOBlyO1UdWXkB:x2Jyxs4V1y2I6Vs9cydWXkB
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2