e13e4e7fc37ff06527d30159c422501decb64a5c338c2afba8091f409489c9ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

M908_IMPACT.rar
Size

3.6MB
Sample

240816-zfb4hawbjh
MD5

d3e4c781aed48f0939f2d186e2c4d24b
SHA1

f44bff95ae234eed732bb5b64b0a6bb42b069c72
SHA256

e13e4e7fc37ff06527d30159c422501decb64a5c338c2afba8091f409489c9ee
SHA512

bed634dfc279547ca1f4a7ea0397b28618a4fab1c28a81cb36b39e4ff6e0ffde373fc8cfaee356403fccc8b4bd12ecacfa4944c7c3e8398e2ae711293ae996b6
SSDEEP

98304:hVGXoXcdc8Fosw6xsPXN0pd3Evn31N1ITB0v0qTHl:hsXOcayoszwOcvnfSTB0vPl

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  REDRAGON IMPACT Gaming Mouse.exe
- Size
  
  4.0MB
- MD5
  
  d02678c385bce24c39e8775b2d8fc26b
- SHA1
  
  870b6f6ffe45b0c0cc20cd3eda86bcef9174d5be
- SHA256
  
  f7d037adc6f36073b65a66671f620064137cfd680256c378c43ddbc8decc3b42
- SHA512
  
  a46f8a9b60efa0c7969bf3f70c03b91b110c8ecc706d33effa0c3ad3c95d89a6e8a917761da6afd09ec4057756faa99ac8db9c37bfa6a758435734e0b3cc15d7
- SSDEEP
  
  98304:nGVt+QLOKcehT3zThLOjZYF94oJsleFM4WOrRwcg:OdLOTep34jZY/4lleNWOlw9
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2