dca5ed63a517222b22579cac29a5f959ab7a536b13b3a2566e381d3ab398df40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dca5ed63a517222b22579cac29a5f959ab7a536b13b3a2566e381d3ab398df40
Size

2.4MB
Sample

240912-zt6v2avaqm
MD5

b20b322d4fe30119a343a18696c78bd9
SHA1

36738f715705c56da024b7adced726570b94d5ab
SHA256

dca5ed63a517222b22579cac29a5f959ab7a536b13b3a2566e381d3ab398df40
SHA512

250e6eb7539f80e77bfa66f57a9e0d20fcb88513d6083bde4b0144a2fd5ce6ab75ab808a1249f8c10aff77781fcb20a659f9126e1099b400e03a3f815b1e595f
SSDEEP

24576:x2Jyxs4VR7of2SI8LUlFl5FpW2Jyxt4VR7of2SI8LUlFl5FpRT:Akuy5smcY/pk3y5smcY/l

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  dca5ed63a517222b22579cac29a5f959ab7a536b13b3a2566e381d3ab398df40
- Size
  
  2.4MB
- MD5
  
  b20b322d4fe30119a343a18696c78bd9
- SHA1
  
  36738f715705c56da024b7adced726570b94d5ab
- SHA256
  
  dca5ed63a517222b22579cac29a5f959ab7a536b13b3a2566e381d3ab398df40
- SHA512
  
  250e6eb7539f80e77bfa66f57a9e0d20fcb88513d6083bde4b0144a2fd5ce6ab75ab808a1249f8c10aff77781fcb20a659f9126e1099b400e03a3f815b1e595f
- SSDEEP
  
  24576:x2Jyxs4VR7of2SI8LUlFl5FpW2Jyxt4VR7of2SI8LUlFl5FpRT:Akuy5smcY/pk3y5smcY/l
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence