05a4b4be6db42e565a728013ffe10d882ea644933bd519e46a4ebe5db2788d62 | Triage

Sharing

General

Target

05a4b4be6db42e565a728013ffe10d882ea644933bd519e46a4ebe5db2788d62
Size

2.8MB
Sample

230828-qwjc3sbc73
MD5

f7d9da69f4f26b1f2941b369da6ad52b
SHA1

e11c76ac88459f491bee85fc7f95b5689359ff23
SHA256

05a4b4be6db42e565a728013ffe10d882ea644933bd519e46a4ebe5db2788d62
SHA512

29a0e60c5b3aff8c945b9e8c36b747d6e9f0ed378ccff3f3b327d4bf75a92538b9e1fef9bae7254455b5a7b99c49c83d085b7ec8bc572c26ee5b51c408fe1c90
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlBl6L9TDbnM1WrhR:Q+8X9G3vP3AMuvwWP

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  05a4b4be6db42e565a728013ffe10d882ea644933bd519e46a4ebe5db2788d62
- Size
  
  2.8MB
- MD5
  
  f7d9da69f4f26b1f2941b369da6ad52b
- SHA1
  
  e11c76ac88459f491bee85fc7f95b5689359ff23
- SHA256
  
  05a4b4be6db42e565a728013ffe10d882ea644933bd519e46a4ebe5db2788d62
- SHA512
  
  29a0e60c5b3aff8c945b9e8c36b747d6e9f0ed378ccff3f3b327d4bf75a92538b9e1fef9bae7254455b5a7b99c49c83d085b7ec8bc572c26ee5b51c408fe1c90
- SSDEEP
  
  49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlBl6L9TDbnM1WrhR:Q+8X9G3vP3AMuvwWP
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2