520e5faf4d8fd41e7b5cf82581b4600468f90b7fe1960fb3ee5d9b92707f24bb | Triage

Sharing

General

Target

520e5faf4d8fd41e7b5cf82581b4600468f90b7fe1960fb3ee5d9b92707f24bb
Size

3.2MB
Sample

230923-rnkfvagc3s
MD5

401beba06a5442c4744b371604da7ef4
SHA1

5abd8463db8a08e7db5da5ee79f87f155bc05f61
SHA256

520e5faf4d8fd41e7b5cf82581b4600468f90b7fe1960fb3ee5d9b92707f24bb
SHA512

1d61450e3bdc07779ec6364d8967671890cd2c6169a0f1f5733f3782f98afc826620d47a4c2b2e1c719b88ae53f7032c13578ccd2926e05899342ee008852914
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlQIXhDgNjkpxHRegkL1:c+8X9G3vP3AMS83pcL

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  520e5faf4d8fd41e7b5cf82581b4600468f90b7fe1960fb3ee5d9b92707f24bb
- Size
  
  3.2MB
- MD5
  
  401beba06a5442c4744b371604da7ef4
- SHA1
  
  5abd8463db8a08e7db5da5ee79f87f155bc05f61
- SHA256
  
  520e5faf4d8fd41e7b5cf82581b4600468f90b7fe1960fb3ee5d9b92707f24bb
- SHA512
  
  1d61450e3bdc07779ec6364d8967671890cd2c6169a0f1f5733f3782f98afc826620d47a4c2b2e1c719b88ae53f7032c13578ccd2926e05899342ee008852914
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlQIXhDgNjkpxHRegkL1:c+8X9G3vP3AMS83pcL
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2