a2b1ca6b07b686265e9fab1d9e8df0b71da88baf97b17febd443f5a2a5e80f86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2b1ca6b07b686265e9fab1d9e8df0b71da88baf97b17febd443f5a2a5e80f86
Size

3.0MB
Sample

230827-seqryacd61
MD5

7cf245c19260304a201976673c6b2cfc
SHA1

b96729f753e2e2d6f5755a54f44c84fa3c8a2532
SHA256

a2b1ca6b07b686265e9fab1d9e8df0b71da88baf97b17febd443f5a2a5e80f86
SHA512

f40f08548366cd9a89626d7caaf5d62743f7d4b3d2374af01a2610668a076633402ae77b52cd8b15ae3b64e609deb2f6810b8ef7cd76cd6d3c738be8121dbac3
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlWkUSwIaBkgEQDrX:c+8X9G3vP3AMQJSwIa6gtX

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  a2b1ca6b07b686265e9fab1d9e8df0b71da88baf97b17febd443f5a2a5e80f86
- Size
  
  3.0MB
- MD5
  
  7cf245c19260304a201976673c6b2cfc
- SHA1
  
  b96729f753e2e2d6f5755a54f44c84fa3c8a2532
- SHA256
  
  a2b1ca6b07b686265e9fab1d9e8df0b71da88baf97b17febd443f5a2a5e80f86
- SHA512
  
  f40f08548366cd9a89626d7caaf5d62743f7d4b3d2374af01a2610668a076633402ae77b52cd8b15ae3b64e609deb2f6810b8ef7cd76cd6d3c738be8121dbac3
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlWkUSwIaBkgEQDrX:c+8X9G3vP3AMQJSwIa6gtX
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2