f6611253102b3816f55e1846db15dd4965d315e84a69983eb0ab91b1665464c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6611253102b3816f55e1846db15dd4965d315e84a69983eb0ab91b1665464c8
Size

3.2MB
Sample

231008-xvt7hsfd6t
MD5

a6bc5c1895031bf3ed4ddeff9e0a2389
SHA1

bb869aafd54018697b8aa5794e36725b67e3f81e
SHA256

f6611253102b3816f55e1846db15dd4965d315e84a69983eb0ab91b1665464c8
SHA512

4257b9f3ac676f3fb7e899f1d35dfcbfbb8b558c03579250af420392fb6254bbb2f1daea7b44d7cee9c00fc7bc1949313c7f90b20aa9a5c54a16e8f3fde5a7c1
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlr5wt3pHdC7bEYpneWt+zY4:Q+8X9G3vP3AMwt3Vd+FeWI3

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  f6611253102b3816f55e1846db15dd4965d315e84a69983eb0ab91b1665464c8
- Size
  
  3.2MB
- MD5
  
  a6bc5c1895031bf3ed4ddeff9e0a2389
- SHA1
  
  bb869aafd54018697b8aa5794e36725b67e3f81e
- SHA256
  
  f6611253102b3816f55e1846db15dd4965d315e84a69983eb0ab91b1665464c8
- SHA512
  
  4257b9f3ac676f3fb7e899f1d35dfcbfbb8b558c03579250af420392fb6254bbb2f1daea7b44d7cee9c00fc7bc1949313c7f90b20aa9a5c54a16e8f3fde5a7c1
- SSDEEP
  
  49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlr5wt3pHdC7bEYpneWt+zY4:Q+8X9G3vP3AMwt3Vd+FeWI3
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2