ef2c7ea5f9a8414bbeed1598519a7bb0b40d4d6bad636cf9d8f7949512adacaa | Triage

Sharing

General

Target

ef2c7ea5f9a8414bbeed1598519a7bb0b40d4d6bad636cf9d8f7949512adacaa
Size

3.2MB
Sample

231004-zal2hsgh57
MD5

a6b827993df202a7e7998adb4abc9d8c
SHA1

472c157740cd6cf149c89e8ad877b6c741c62c26
SHA256

ef2c7ea5f9a8414bbeed1598519a7bb0b40d4d6bad636cf9d8f7949512adacaa
SHA512

0be2807487276b761a786bf7c532b9d75cb1001a8ea6f9ae35a42594e3d9775cddbc47eb7d396dbca687d657dc4c94c87d09404d665a7cb01240574657163120
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlU5M8YBCGt/f3LmMb:c+8X9G3vP3AMC5M1Bf3LmMb

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  ef2c7ea5f9a8414bbeed1598519a7bb0b40d4d6bad636cf9d8f7949512adacaa
- Size
  
  3.2MB
- MD5
  
  a6b827993df202a7e7998adb4abc9d8c
- SHA1
  
  472c157740cd6cf149c89e8ad877b6c741c62c26
- SHA256
  
  ef2c7ea5f9a8414bbeed1598519a7bb0b40d4d6bad636cf9d8f7949512adacaa
- SHA512
  
  0be2807487276b761a786bf7c532b9d75cb1001a8ea6f9ae35a42594e3d9775cddbc47eb7d396dbca687d657dc4c94c87d09404d665a7cb01240574657163120
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlU5M8YBCGt/f3LmMb:c+8X9G3vP3AMC5M1Bf3LmMb
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2