c556329ad20700d4511eb1b246c765f0b82a522f170f362cfc671dc367ca8900 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c556329ad20700d4511eb1b246c765f0b82a522f170f362cfc671dc367ca8900
Size

2.4MB
Sample

240912-153hesydjg
MD5

835ada317fecd0d81a90674a5282eb19
SHA1

b326cfd4d1bd6c145d2bd8f8aa41f6f333722bf0
SHA256

c556329ad20700d4511eb1b246c765f0b82a522f170f362cfc671dc367ca8900
SHA512

9a4f731c81ee18d67759c4f7cfdd030b7cd979703abe20e1fef5aec40bcb87cce3eea2babb834dea381d0361184dfac583bf8fd950409be29ab6cd2c425727fd
SSDEEP

24576:x2Jyxs4VR7of2SI8LUlFl5FpW2Jyxt4VR7of2SI8LUlFl5FpxX:Akuy5smcY/pk3y5smcY/x

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  c556329ad20700d4511eb1b246c765f0b82a522f170f362cfc671dc367ca8900
- Size
  
  2.4MB
- MD5
  
  835ada317fecd0d81a90674a5282eb19
- SHA1
  
  b326cfd4d1bd6c145d2bd8f8aa41f6f333722bf0
- SHA256
  
  c556329ad20700d4511eb1b246c765f0b82a522f170f362cfc671dc367ca8900
- SHA512
  
  9a4f731c81ee18d67759c4f7cfdd030b7cd979703abe20e1fef5aec40bcb87cce3eea2babb834dea381d0361184dfac583bf8fd950409be29ab6cd2c425727fd
- SSDEEP
  
  24576:x2Jyxs4VR7of2SI8LUlFl5FpW2Jyxt4VR7of2SI8LUlFl5FpxX:Akuy5smcY/pk3y5smcY/x
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence