305b48a8daacd8dfe05d0830f92755c6dcd77deede1d53994fd9bd5aa7c0b2aa | Triage

Sharing

General

Target

305b48a8daacd8dfe05d0830f92755c6dcd77deede1d53994fd9bd5aa7c0b2aa
Size

3.5MB
Sample

230919-pg7axsah98
MD5

cdd75667cc0ffed7df5ba5de7ab029ec
SHA1

543da37e13052b9b69c9def03b39e1c3803eb818
SHA256

305b48a8daacd8dfe05d0830f92755c6dcd77deede1d53994fd9bd5aa7c0b2aa
SHA512

ea0276cd46b396445686327c1df721510ccf4bbea2928939e9b63caf87e507c6eca5f0283e4d960061407fe74ebaa3a4fcc6a7cbec63ecb29e27d424a781d820
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlk4z9+OKXb3CBHNqsk+Wo/bq:c+8X9G3vP3AMu4zPmb3uHBhq

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  305b48a8daacd8dfe05d0830f92755c6dcd77deede1d53994fd9bd5aa7c0b2aa
- Size
  
  3.5MB
- MD5
  
  cdd75667cc0ffed7df5ba5de7ab029ec
- SHA1
  
  543da37e13052b9b69c9def03b39e1c3803eb818
- SHA256
  
  305b48a8daacd8dfe05d0830f92755c6dcd77deede1d53994fd9bd5aa7c0b2aa
- SHA512
  
  ea0276cd46b396445686327c1df721510ccf4bbea2928939e9b63caf87e507c6eca5f0283e4d960061407fe74ebaa3a4fcc6a7cbec63ecb29e27d424a781d820
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlk4z9+OKXb3CBHNqsk+Wo/bq:c+8X9G3vP3AMu4zPmb3uHBhq
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2