b1268fb09a84ce13a56880b43f7de7adf92f0bed936f9d61d556ae5ec8e2626b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1268fb09a84ce13a56880b43f7de7adf92f0bed936f9d61d556ae5ec8e2626b
Size

3.3MB
Sample

230827-qz1rjabf3x
MD5

18364a3668520b058305271bf2da8e29
SHA1

b89a30be62a96077ee0c1ba9c8a3f1bce0a039be
SHA256

b1268fb09a84ce13a56880b43f7de7adf92f0bed936f9d61d556ae5ec8e2626b
SHA512

0e1e26a49752ae2a52f2b6c3f23da4642d890f94494524dcf31c3bfa0e9384be47c50f7c6a43764a410ad04bf7637fdcc7a08d2afa5f5c27c38fd4e875544369
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTl72kGmqsW/A010rTEo:Q+8X9G3vP3AMhDISw08o

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  b1268fb09a84ce13a56880b43f7de7adf92f0bed936f9d61d556ae5ec8e2626b
- Size
  
  3.3MB
- MD5
  
  18364a3668520b058305271bf2da8e29
- SHA1
  
  b89a30be62a96077ee0c1ba9c8a3f1bce0a039be
- SHA256
  
  b1268fb09a84ce13a56880b43f7de7adf92f0bed936f9d61d556ae5ec8e2626b
- SHA512
  
  0e1e26a49752ae2a52f2b6c3f23da4642d890f94494524dcf31c3bfa0e9384be47c50f7c6a43764a410ad04bf7637fdcc7a08d2afa5f5c27c38fd4e875544369
- SSDEEP
  
  49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTl72kGmqsW/A010rTEo:Q+8X9G3vP3AMhDISw08o
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2