b7191e460d83370e4529c89b812404605381ab339dadbe0380f960dc02ce4e7b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7191e460d83370e4529c89b812404605381ab339dadbe0380f960dc02ce4e7b
Size

2.9MB
Sample

231007-xry2ashb25
MD5

b1708b96f856c32923c2c9dce947f296
SHA1

8e672b814c4be9062c1e5fae8ec530908ed3f881
SHA256

b7191e460d83370e4529c89b812404605381ab339dadbe0380f960dc02ce4e7b
SHA512

021ed3c27d52acdff2ba4c8e216f88c1f0747755e1890ea3422aee68f04017f7409522334eead921916c2be31c49d2139a22bcc00c357907d94a465467a9dd58
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlFUH+2ooXzqK0:c+8X9G3vP3AMPc+2ooXGK0

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  b7191e460d83370e4529c89b812404605381ab339dadbe0380f960dc02ce4e7b
- Size
  
  2.9MB
- MD5
  
  b1708b96f856c32923c2c9dce947f296
- SHA1
  
  8e672b814c4be9062c1e5fae8ec530908ed3f881
- SHA256
  
  b7191e460d83370e4529c89b812404605381ab339dadbe0380f960dc02ce4e7b
- SHA512
  
  021ed3c27d52acdff2ba4c8e216f88c1f0747755e1890ea3422aee68f04017f7409522334eead921916c2be31c49d2139a22bcc00c357907d94a465467a9dd58
- SSDEEP
  
  49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlFUH+2ooXzqK0:c+8X9G3vP3AMPc+2ooXGK0
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2