ff086c9db602f0ff8e636c6ae1b6c4ceceab2d220d5a131a0cab987729965b33 | Triage

Sharing

General

Target

ff086c9db602f0ff8e636c6ae1b6c4ceceab2d220d5a131a0cab987729965b33
Size

3.0MB
Sample

231008-xqn5psfd3t
MD5

133bf7a1f8291406b016ac7dc51e14dc
SHA1

c6003c4a31210b43a87bd708a3b7a4d19c12adde
SHA256

ff086c9db602f0ff8e636c6ae1b6c4ceceab2d220d5a131a0cab987729965b33
SHA512

915972d6b3600d25328dcccc1205a27751cc3574f55a78c32988aba8e854571d398df7f7319fd3ef64f8da5fa855953a308595aeb3e7cf62fb96e2bebeab899a
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlunkJ5jELiS3:Q+8X9G3vP3AM9WX

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  ff086c9db602f0ff8e636c6ae1b6c4ceceab2d220d5a131a0cab987729965b33
- Size
  
  3.0MB
- MD5
  
  133bf7a1f8291406b016ac7dc51e14dc
- SHA1
  
  c6003c4a31210b43a87bd708a3b7a4d19c12adde
- SHA256
  
  ff086c9db602f0ff8e636c6ae1b6c4ceceab2d220d5a131a0cab987729965b33
- SHA512
  
  915972d6b3600d25328dcccc1205a27751cc3574f55a78c32988aba8e854571d398df7f7319fd3ef64f8da5fa855953a308595aeb3e7cf62fb96e2bebeab899a
- SSDEEP
  
  49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlunkJ5jELiS3:Q+8X9G3vP3AM9WX
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2