cf06b743da6def4b7212836fdd1b4a42169a6b6333f8d754c7ccbb318622c99e | Triage

Sharing

General

Target

cf06b743da6def4b7212836fdd1b4a42169a6b6333f8d754c7ccbb318622c99e
Size

3.4MB
Sample

230922-lss1wshc48
MD5

18340b4202a832708fd19e7629130c64
SHA1

a63c8e56233e767feabe9dbc1ab96477ab2f52af
SHA256

cf06b743da6def4b7212836fdd1b4a42169a6b6333f8d754c7ccbb318622c99e
SHA512

e768b252bd0e3091b7fca1f8a599d4dcb3de0f3728b6083a37c95ca34fead5af8a97f70a5e25cb413ebaad3cda228250d17fdae5aec8cf745d1e75594cebefd9
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlGqp/k9kDxeUlgiwOpxZd:c+8X9G3vP3AM4qrMZi9xZd

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  cf06b743da6def4b7212836fdd1b4a42169a6b6333f8d754c7ccbb318622c99e
- Size
  
  3.4MB
- MD5
  
  18340b4202a832708fd19e7629130c64
- SHA1
  
  a63c8e56233e767feabe9dbc1ab96477ab2f52af
- SHA256
  
  cf06b743da6def4b7212836fdd1b4a42169a6b6333f8d754c7ccbb318622c99e
- SHA512
  
  e768b252bd0e3091b7fca1f8a599d4dcb3de0f3728b6083a37c95ca34fead5af8a97f70a5e25cb413ebaad3cda228250d17fdae5aec8cf745d1e75594cebefd9
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlGqp/k9kDxeUlgiwOpxZd:c+8X9G3vP3AM4qrMZi9xZd
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2