cd25d25ce45a4c49dafe8d8b35a2b4634eea83718e94c6711e4b5232991bb6a7 | Triage

Sharing

General

Target

cd25d25ce45a4c49dafe8d8b35a2b4634eea83718e94c6711e4b5232991bb6a7
Size

2.6MB
Sample

240418-nnrndabf39
MD5

ab6535694240032d42c71e5a9852fc31
SHA1

c0f6668bb5f8df4d71365216e9dcf79b9ea9074d
SHA256

cd25d25ce45a4c49dafe8d8b35a2b4634eea83718e94c6711e4b5232991bb6a7
SHA512

ba328988dca239f875d7d4e8d6025f44350c41da1321d011a1a3478f4860690cc968d4c831eb28364f1d56fbf3db1063cb6594a103b4d3d0ac42bfb7b7425a27
SSDEEP

49152:z7SqGRIgg2SirwkF9xdtb43lyGKCafpKkiwnaDahmPzpY4FPyaza:SxxLFfY/KCCpKk9aWMzZyau

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  cd25d25ce45a4c49dafe8d8b35a2b4634eea83718e94c6711e4b5232991bb6a7
- Size
  
  2.6MB
- MD5
  
  ab6535694240032d42c71e5a9852fc31
- SHA1
  
  c0f6668bb5f8df4d71365216e9dcf79b9ea9074d
- SHA256
  
  cd25d25ce45a4c49dafe8d8b35a2b4634eea83718e94c6711e4b5232991bb6a7
- SHA512
  
  ba328988dca239f875d7d4e8d6025f44350c41da1321d011a1a3478f4860690cc968d4c831eb28364f1d56fbf3db1063cb6594a103b4d3d0ac42bfb7b7425a27
- SSDEEP
  
  49152:z7SqGRIgg2SirwkF9xdtb43lyGKCafpKkiwnaDahmPzpY4FPyaza:SxxLFfY/KCCpKk9aWMzZyau
Score

7^/10

persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Blocklisted process makes network request
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2